CYBER SECURITY IN MODERN WORLD

      Cybersecurity is the practice of protecting computers, networks, data, and digital systems from cyber threats such 
      hacking, malware, phishing, and data breaches. 
      In today's interconnected world, cybersecurity is essential for safeguarding personal information, business operations,   
      financial transactions, and critical infrastructure. 
      As technology advances, cyber attacks are becoming more sophisticated, making strong security measures increasingly 
      important.

      Transition to Quantum Security

     With the development of quantum computing, traditional encryption methods may become vulnerable because powerful 
     quantum computers could potentially break current cryptographic algorithms much faster than classical computers.
     Quantum security, also known as post-quantum cryptography, focuses on developing new encryption techniques that can
     resist attacks from both classical and quantum computers.
     This emerging field aims to ensure long-term data protection and secure communication in the future quantum era.

Stay Secure

Insights and tips on protecting your digital life every day.

Latest posts

  • Lab: Reflected XSS protected by CSP, with CSP bypass

    This lab uses CSP and contains a reflected XSS vulnerability. To solve the lab, perform a cross-site scripting attack that bypasses the CSP and calls the alert function. https://portswigger.net

    Read more

  • IBM Cloud Security and Compliance Center(as a presentation)

    https://mediacenter.ibm.com/media/Intro%20to%20IBM%20Cloud%20Security%20and%20Compliance%20Center/1_yv4pwfr3

    Read more

  • Lab: Reflected XSS in a JavaScript URL with some characters blocked

    This lab reflects your input in a JavaScript URL, but all is not as it seems. This initially seems like a trivial challenge; however, the application is blocking some characters in an attempt to prevent XSS attacks. https://portswigger.net The lab will be solved, but the alert will only be called if you click “Back to…

    Read more

  • Lab: Indirect prompt injection

    This lab is vulnerable to indirect prompt injection. The user carlos frequently uses the live chat to ask about the Lightweight “l33t” Leather Jacket product. https://portswigger.net Create a user account Test the attack Exploit the vulnerability

    Read more

  • Lab: Reflected XSS with event handlers and href attributes blocked

    This lab contains a reflected XSS vulnerability with some whitelisted tags, but all events and anchor href attributes are blocked. To solve the lab, perform a cross-site scripting attack that injects a vector that, when clicked, calls the alert function. https://portswigger.net Note that you need to label your vector with the word “Click” in order to induce…

    Read more

  • Lab: Reflected XSS with AngularJS sandbox escape and CSP

    This lab uses CSP and AngularJS. To solve the lab, perform a cross-site scripting attack that bypasses CSP, escapes the AngularJS sandbox, and alerts document.cookie. https://portswigger.net The exploit uses the ng-focus event in AngularJS to create a focus event that bypasses CSP. It also uses $event, which is an AngularJS variable that references the event object.…

    Read more

  • Lab: Exploiting vulnerabilities in LLM APIs

    This lab contains an OS command injection vulnerability that can be exploited via its APIs. You can call these APIs via the LLM. https://portswigger.net Ask the LLM what APIs it has access to. The LLM responds that it can access APIs controlling the following functions: Consider the following points: Ask the LLM what arguments the…

    Read more

  • Web LLM attacks

    Organizations are rushing to integrate Large Language Models (LLMs) to improve their online customer experience. https://portswigger.net What is a large language model? Large Language Models (LLMs) are AI algorithms that can process user inputs and create plausible responses by predicting sequences of words. They are trained on huge semi-public data sets, using machine learning to…

    Read more

  • Lab: Reflected XSS with AngularJS sandbox escape without strings

    This lab uses AngularJS in an unusual way, where the $eval function is not available, and you will be unable to use any strings in AngularJS. To solve the lab, perform a cross-site scripting attack that escapes the sandbox and executes the alert function without using the $eval function. https://portswigger.net   The exploit uses toString() to create a string…

    Read more

  • reflected DOM vulnerability

    Reflected DOM vulnerabilities occur when the server-side application processes data from a request and echoes the data in the response. https://portswigger.net Tools: Burp Suite, OWASP ZAP, Linux Content security policy header not set  . The recommendation is to implement a strict CSP to reduce the risk and impact of client-side attacks like XSS, data exfiltration, and clickjacking.…

    Read more