Blog Posts

The State of the Web: Technology Adoption and Security Issues in the Internet’s Top 1 Million Sites

In the vast world of the internet, there are millions of websites, each with their unique identity and purpose. But what lies behind these websites? What technologies and tools power them, and what potential vulnerabilities might exist?

To understand this better, we’ve decided to take a closer look at the Tranco (https://tranco-list.eu/) Top 1 Million websites on the internet. We have carefully examined and analyzed these websites, trying to uncover the technologies and the tools/technologies that are used to build and operate them.

Read more →

SSL Unpinning Made Easy

In this blog, we'll explore a simple way to disable SSL pinning in Android apps. But first, let's break down how BurpSuite intercepts HTTPS Traffic, ensuring that beginners can follow along with what we're discussing.

Read more →

SAML 101

SAML stands for Security Assertion Markup Language. It is a standard commonly used Single Sign-On (SSO). It is an XML-based open-standard for transferring identity data or authorization credentials between two parties: an identity provider (IdP) and a service provider (SP).

Read more →

Exploiting GraphQL for Fun and Bounties

GraphQL is a query language that allows you to request data from a server. Instead of getting a fixed set of data, like in traditional APIs, you can send a query to the server specifying exactly what data you need. You define the structure of the data you want and the server responds with that specific data, nothing more and nothing less.

Read more →