Tag: Web Heist as a Service

Man In The DOM (MiTD)

Injection, Projects, Uncategorized, Web Attacks

Post author By Munir
February 19, 2016
No Comments on Man In The DOM (MiTD)

You are in the middle of an assessment , things are thick. SE is the only option but you are short on time. Users however are sloppy and the question begs to ask: What’s the Worst that could happen on an unlocked screen for a few minutes? Well Take these pointers at hand: Users Leave […]

Tags browser manipulation, Chrome Social Engineering, DOM Injection, DOM Manipulation, MiTD, unmask password, Web Heist as a Service, web security

XAMPP 1.7.3 Heisting

Uncategorized, WAAS, Web Attacks

Post author By Munir
August 7, 2014
No Comments on XAMPP 1.7.3 Heisting

Due to the increase in Web Application Exfiltration of data it would be prudent to show a simple scenario that would have this kind of attack suffice; This is to show a vulnerability within webdav service on xampp 1.7.3. Let’s assume the setup below as a simple lab: A banking system application in PHP hosted on […]

Tags Backing UP MSSQL Databases, Hacking XAMPP, Shelling XAMPP, WAAS, Web Heist as a Service, Webdav Attacks