Latest posts

  • Why IBM Cloudant?(part 2)

    Built on CouchDB technology with compatible API and replication protocols, IBM Cloudant supports flexible, schema-free JSON document storage, which is ideal for applications that require rapid, iterative development and dynamic data structures. Its high availability and automated failover ensure 99.99% SLA reliability and minimal downtime. http://ibm.com

    Read more

  • IBM Cloudant(part 1)

    Built on CouchDB technology with compatible API and replication protocols, IBM Cloudant supports flexible, schema-free JSON document storage, which is ideal for applications that require rapid, iterative development and dynamic data structures. It’s high availability and automated failover ensure 99.99% SLA reliability and minimal downtime.

    Read more

  • Intro to IBM Cloud Security and Compliance Center

    In this video, Tim Brantner explains how you can manage risk and compliance, ensure data protection, and infuse security and privacy for your cloud developers – with as much automation and standardization as possible – with IBM Cloud Security and Compliance Center (SCC). https://mediacenter.ibm.com/media/Intro%20to%20IBM%20Cloud%20Security%20and%20Compliance%20Center/1_yv4pwfr3

    Read more

  • Lab: Exploiting XXE to retrieve data by repurposing a local DTD

    This lab has a “Check stock” feature that parses XML input but does not display the result. To solve the lab, trigger an error message containing the contents of the /etc/passwd file. You’ll need to reference an existing DTD file on the server and redefine an entity from it. https://portswigger.net Visit a product page, click “Check…

    Read more

  • Lab: Clobbering DOM attributes to bypass HTML filters

    This lab uses the HTML Janitor library, which is vulnerable to DOM clobbering. To solve this lab, construct a vector that bypasses the filter and uses DOM clobbering to inject a vector that calls the print() function. You may need to use the exploit server to enable your vector to auto-execute in the victim’s browser. https://portswigger.net…

    Read more

  • IBM Cybersecurity Products

    1. IBM QRadar (Security Intelligence & SIEM) Used for: Security monitoring, threat detection, and incident response. 2. IBM Verify (Identity and Access Management) 3. IBM Guardium (Data Security) 4. IBM MaaS360 (Endpoint & Mobile Security) 5. IBM Security Key Lifecycle Manager

    Read more

  • Lab: Exploiting DOM clobbering to enable XSS

    This lab contains a DOM-clobbering vulnerability. The comment functionality allows “safe” HTML. To solve this lab, construct an HTML injection that clobbers a variable and uses XSS to call the alert() function. https://portswigger.net

    Read more

  • IBM Analytics Platforms

    IBM Cognos Analytics Key features IBM Website (Official Page) You can visit the official IBM page here: What the IBM Platform Does IBM Cognos Analytics is a web-based business intelligence platform that helps companies analyze data and create reports and dashboards. Main capabilities on the IBM website include: Simple Explanation

    Read more

  • API testing

    APIs (Application Programming Interfaces) enable software systems and applications to communicate and share data. All dynamic websites are composed of APIs, so classic web vulnerabilities like SQL injection could be classed as API testing. In this topic, we’ll teach you how to test APIs that aren’t fully used by the website front-end, with a focus…

    Read more

  • Reflected DOM XSS Vulnerability Assessment (as a presentation)

    Read more