Cobalt Core (13)

Introduction to Serverless Vulnerabilities

November 23, 2022

Est Read Time: 6 min

Core Pentester Harsh Bothra introduces us to serverless vulnerabilities. He reviews the top 10 vulnerabilities and concludes with how to remediate them.

Cobalt Core

Red Teaming vs. Pentesting

November 21, 2022

Est Read Time: 2 min

Core Pentester Saad Nasir writes about what the difference between red teaming and pentesting is based on his own experiences. Saad is a Pentester in Cobalt's Core and on the Red Team at SolarWinds.

Cobalt Core

Common Vulnerabilities in NodeJS Applications

November 18, 2022

Est Read Time: 7 min

Node.js is an open-source and cross-platform JavaScript runtime environment. Today we are going to look at 3 different vulnerabilities by analyzing the source code of an application and how you can detect and exploit them.

Cobalt Core

Source Code Review

November 9, 2022

Est Read Time: 11 min

Are you checking your new products for vulnerabilities in all capacities? Ninad Mathpati shares what you need to be doing during your Source Code Review and what attackers look for.

Cobalt Core

Pentesting Made Simple, an Italian Hacking Community

November 3, 2022

Est Read Time: 2 min

Core Pentester Reando Veshi has started his own hacking community in Italy: Pentesting Made Simple.

Cobalt Core

Pentester Spotlight: Alexis Fernández, Retired Developer takes on Pentesting

October 26, 2022

Est Read Time: 3 min

Alexis Fernandez has been a member of the Cobalt Core for a little over a year now. He started in security as a Web Developer before switching to ethical hacking.

Cobalt Core

What it means to be in the Cobalt Core

October 18, 2022

Est Read Time: 4 min

What does it mean to be in the Cobalt Core? I asked some of our Core Pentesters about their experiences in the Core and what has been most memorable for them.

Cobalt Core

The Guide to Understanding Content Security Policy (CSP) and Bypass Exploits

October 12, 2022

Est Read Time: 9 min

This blog post aims to demonstrate what CSP is and why CSP is implemented. And how attackers can bypass CSP. In this article, I will include how you can bypass some directives to achieve XSS on the target application.

Cobalt Core

Pentester of the Quarter: Farid Luhar

October 5, 2022

Est Read Time: 1 min

The Cobalt Community team is excited to announce that our Q4 Pentester of the Quarter is Farid Luhar! Farid has been...

Cobalt Core

11 12 13 14 15

RSS