Usama Rasheed
Web security expert & pentesting specialist.
- 1
- Followers
OWASP A01: Broken Access Control
🔒 OWASP A01 — Broken Access Control Assessment
Overview
Performed a manual security assessment of a vulnerable web application to identify Broken Access Control issues affecting API endpoints.
What I Found
Horizontal Privilege Escalation (IDOR)
...
OWASP A02: Cryptographic Failures
🔐 OWASP A02 — Cryptographic Failures Assessment
Overview
Conducted a manual assessment focusing on the protection of sensitive data during storage and transmission.
What I Found
Sensitive information exposed inside JWTs
JWT information disclosure
...
🚨 Vulnerability Spotlight: OS Command Injection
⚠️ The Flaw: Unsanitized input in a "Ping Device" feature allowed arbitrary command execution directly on the server shell.
🕵️♂️ The Exploit (via Burp Suite):
Instead of a normal IP, I injected shell metacharacters: 127.0.0.1; cat...
Emergency recovery and malware removal for a compromised website, transforming it from a hacked state to a fully secured, hardened, and operational platform.
The Project Overview
Traditional rule-based phishing detection mechanisms struggle to keep up with modern cyber threats. To solve this, I engineered PhishX, an intelligent, AI-driven sandbox capable of analyzing and classifying malicious URLs in real-time.
How the AI Works
The...
