Introduction: In this write-up, we embark on an exploration of a significant security discovery within the web application &quot;Trustline&#39;s Maintenance Parachute.&quot; This revelation exposes a series of intricate steps that led to the acquisition of a hidden flag, emphasizing the importance of comprehensive security measures in the digital realm.

Vulnerability Unveiled: Trustline&#39;s Maintenance Parachute is a web application housing a maintenance message. However, beneath the surface, a vulnerability lies, allowing for unauthorized access and manipulation. By navigating through specific actions, the challenge presents an avenue to uncover sensitive data, making evident the necessity of robust security protocols.

Step-by-Step Exploitation:

Step 1: Source Code Examination Upon reaching Trustline&#39;s main page, a message hints at maintenance activities. The provided JavaScript source code, referencing &quot;new-functions.js,&quot; unveils a set of API endpoints.

Step 2: Registration API Exploitation

<ul>
	<li>Initiate a POST request to &quot;/register-api&quot; without parameters.</li>
	<li>Receive a response indicating missing &quot;username&quot; and &quot;password&quot; fields in JSON format.</li>
</ul>

<img alt="" src="/media/blog/2023/08/23/register-api-1_uaNLpzJ.png" />

Step 3: Cracking the Registration

<ul>
	<li>Send a POST request to &quot;/register-api&quot; with &quot;username=TEST&amp;password=TEST.&quot;</li>
	<li>Attain a 200 OK response, including a JSON object with a token.</li>
</ul>

<img alt="" src="/media/blog/2023/08/23/register-api_XVBmoQa.png" />

Step 4: Decoding the Token

<ul>
	<li>Employ a JWT tool to decode the token and reveal its contents, including the role and username.&nbsp;</li>
	<li>note: i used https://jwt.io/&nbsp;</li>
</ul>

<img alt="" src="/media/blog/2023/08/23/jwt.png" />

Step 5: Token Cracking

<ul>
	<li>Employ the &quot;rockyou&quot; method to decipher the token, leading to the revelation of the secret key: &quot;secretkey.&quot;</li>
	<li>note :&nbsp;&quot;&nbsp;<code>john file --wordlist=rockyou.txt &quot;</code></li>
	<li><code>you have to make 2 txt file one of the wordlist another for your user role token.</code></li>
</ul>

&nbsp;

Step 6: Token Manipulation for Admin Privileges

<ul>
	<li>Alter the token&#39;s contents to transform the role to &quot;admin,&quot; generating a fresh token.</li>
</ul>

Step 7: Authorization and Access

<ul>
	<li>Make a POST request to &quot;/login-api&quot; with the new token provided in the &quot;Authorization&quot; header.</li>
	<li>Receive a 200 OK response containing another token.</li>
</ul>

<img alt="" src="/media/blog/2023/08/23/login-api_E7EhkrT.png" />

Step 8: Accessing the Dashboard

<ul>
	<li>Submit a GET request to &quot;/maintenance-parachute/dashboard/&quot; using the newly acquired token.</li>
	<li>Witness the long-awaited flag as part of the response.</li>
</ul>

<img alt="" src="/media/blog/2023/08/23/flag.png" />

Impact and Mitigation:

The revelation of this complex vulnerability within Trustline&#39;s Maintenance Parachute underscores the significance of robust security frameworks. Through a series of strategic actions, unauthorized access to sensitive information was achieved. This discovery highlights the potential consequences of insufficient security measures in web applications.

Mitigation entails:

<ul>
	<li>Implementing stringent server-side validation to prevent unauthorized access.</li>
	<li>Relying on server-side checks rather than solely on client-side validations.</li>
	<li>Ensuring proper session management to deter unauthorized actions.</li>
	<li>Regularly evaluating and fortifying security measures to protect against emerging threats.</li>
</ul>

By dissecting this challenge, we gain insights into the intricate world of web application security, emphasizing the imperative nature of constant vigilance and proactive measures to thwart potential vulnerabilities.

the-third-blog

Blog 3rd

حل لتحدي البرشوت

Writeup-for-Parachute

Writeup-for-Parachute-arabic

Writeup for Parachute

Pentests are an integral part of security. At the most basic level, they are required for compliance or validation, and are an industry best practice that supports good, routine security hygiene. But there&rsquo;s a lot of room for improvement. In the past, penetration testing was a contract-based, complex effort that organizations could not carry out more than 1-2 times per year. PTaaS enables organizations to perform a penetration test daily, or even after each code change. PTaaS facilitates more frequent testing across all environments.

<h2>What is Penetration Testing as a Service ( PTaaS )?</h2>

Penetration Testing as a Service (PTaaS) is an agile security methodology where your system is tested and scanned continuously to check if there are any security loopholes. It offers more frequent and cost-effective access to penetration tests and a platform that facilitates collaborations between penetration testers and client organizations. Organizations leverage PTaaS to detect and remediate vulnerabilities regularly.

<h2>How it Works?</h2>

Trustline Pentest helps organizations build resistance to cyberattacks in two ways. First by delivering high-quality pentest engagements with meaningful findings. This is achieved by carefully curating elite teams of pentesters from a community of hundreds of ethical hackers.Our community of pentesters consistently find critical vulnerabilities that others miss.Second, efficient testing reduces friction in the pentesting lifecycle. This is achieved through our SaaS-delivered engagement management software and services which orchestrate engagements, expose findings in real-time, and provide communication channels with the pentesters. We can launch a test in as little as few days, compared to 3-4 weeks for traditional pentests.

<h2>Benefits of Penetration as a Service :</h2>

Trustline Pentest aligns with modern software development methodologies. It offers speed, can easily integrate with your internal processes, and provides more visibility into potential security gaps.

Diverse Pentester Community

Companies tend to switch pentest vendors in the hopes that pentesters from different firms will provide different results and maximize their coverage. But vender evaluations is difficult and can be hard to know exactly what you&rsquo;re getting from a pentesting firm until they have performed the test. Avoid these challenges by taking advantage of Trustline large and diverse community.

Pentest as a Service Platform

SaaS platform for efficient scoping, pentest set-up, and program orchestration with custom and self-service capabilities. In addition to comprehensive view of all pentest programs with progress across phases of the engagements.

Workflows and SDLC Integrations

Trustline pentests plug into the processes and applications you&rsquo;re already using, like Slack to eliminate delays and ensure devops can respond quickly for faster remediation. Incoming reports are complete and comprehensive to enable reproducible results, and any retesting is included.

Speed of Delivery

Your SDLC moves fast and you need your pentests to keep up. Trustline pentests can be launched in as little as days. You can see results in just weeks. A team is selected based on your requirements and they communicate and collaborate with you as they search for and find vulnerabilities. If vulnerabilities are discovered, you&rsquo;re immediately alerted instead of waiting until the final report.

Process Transparency and Easy Communication

Trustline pentests are open, transparent, and flexible, offering interactive and engaging communication throughout the testing process. This gives you the ability to help remove testing roadblocks, get instant feedback and updates, and monitor the overall process. This direct feedback loop with testers encourages more effective testing and returns more reliable, higher quality results.

<h2>How Trustline Can Help :</h2>

Trustline Pentest helps organizations go beyond the status quo of &ldquo;check the box&rdquo; penetration testing. Organizations using Trustline Pentest benefit from fast, high quality actionable security outcomes with on-demand pentest as a service capabilities. Pentest is even more effective at keeping businesses safe when combined with Bugbounty, and VDP to minimize risk and elevate security <a href="mailto:info@trustline.sa">contact us </a>to know more about Trustline PenTest.

Android 12 is now officially available for Google&rsquo;s Pixel phones and will slowly roll out to others in the coming months. Chances are, you think of Android as a consumer product, but over the course of the last few years, Google has put a lot of work into making it an enterprise tool, too. It&rsquo;s maybe no surprise that with the launch of Android 12, which already includes a number of&nbsp;<a href="https://blog.google/products/android-enterprise/androidenterprise12/" rel="noopener" target="_blank">new enterprise features by default</a>, Google is also now announcing a couple of new security-focused initiatives around&nbsp;<a href="https://www.android.com/enterprise/" rel="noopener" target="_blank">Android Enterprise</a>, too.

This includes a new bug bounty program, the aptly named&nbsp;<a href="https://www.google.com/about/appsecurity/android-rewards/" rel="noopener" target="_blank">Android Enterprise Vulnerability Program</a>, which promises up to $250,000 for a full exploit of a Pixel device that runs Android Enterprise.

But Google is also working with its wider partner ecosystem to expand its support for the Zero Trust security model on Android. This means, for example, working with partners like Okta, Ping and ForgeRock to move their authentication workflows from WebView to Chrome&nbsp;<a href="https://developer.chrome.com/docs/android/custom-tabs/" rel="noopener" target="_blank">Custom Tabs</a>&nbsp;on Android. Google has long argued that developers should use Custom Tabs whenever they render content from outside of their own domain, in part for performance reasons, but also because Chrome&rsquo;s Safe Browsing features provide additional security.

&nbsp;

&ldquo;While WebView is a flexible and powerful component for rendering web content, Custom Tabs are more modern and full-featured, allowing identity providers to gather device trust signals, improve employee security and enable single-sign-on across apps and the web,&rdquo; explains Rajeev Pathak, a senior product manager&nbsp;at Google, in today&rsquo;s announcement.

Google is also extending its Android Management API to make it easier for companies that use Enterprise Mobility Solutions from the likes of Microsoft, Citrix or Google itself to ensure that users &ldquo;receive the fastest delivery of all of our enterprise features, with best practices and Android Enterprise Recommended requirements set by default.&rdquo;

&nbsp;

<img alt="" src="/media/blog/2023/02/26/9032cb3e-cf52-440c-b88e-260c36215bf3.png" style="height:315px; width:600px" />

Google-launches-bug-bounty-program-for-Android-Enterprise

Why-is

Google launches a bug bounty program for Android Enterprise Post

قوقل تطلق برنامج مكافأة الثغرات لأندرويد الأعمال

What is Appsec?

With the rising adoption of software applications in business, an increase in cybersecurity attacks shows an upward trend. Out of all such attacks, Perforce.com projects that approximately&nbsp;<a href="https://www.perforce.com/blog/kw/what-is-appsec" rel="noreferrer noopener nofollow" target="_blank">84% of such cybersecurity attacks are carried out in the application layer</a>.

To tackle such attacks, an efficient Application Security (AppSec) mechanism requires a combination of tools and practices for identifying, remediating, and preventing security vulnerabilities throughout the application development life cycle. By proactively fixing vulnerabilities, security teams improve the application&rsquo;s security posture since threats are mitigated before being exploited in production. 
&nbsp;

Modern software development primarily emphasizes agility, where most efforts focus on streamlining the CI/CD pipeline. AppSec, on the other hand, blends security seamlessly into development and operations workflows to build&nbsp;safe applications while keeping development costs low.

Why is application security important to protect customers&rsquo; data?

Data security and privacy are core aspects of every application security approach. Every application processes and stores sensitive business information and customer data, often the prime targets in a breach.&nbsp;

A data breach leads to a loss of confidence and trust of valuable customers and tarnishes a business&rsquo;s reputation in the longer run. On the contrary, administering appropriate AppSec mechanisms and data privacy policies also helps boost brand value since consumers associate with businesses that comply with robust data security safeguards.

Most users are concerned about how systems handle their data. With proper data privacy regulations, customers are guaranteed safety against identity theft and credit card fraud to trust the platform.&nbsp;

Adopting data protection policies also enforces an effective ethics code since handling data responsibly is considered general ethical practice. Failure to protect sensitive customer data also attracts penalties from regulatory authorities, leading to loss of revenue or operating licenses.&nbsp;

Application Security Reports

As the cybersecurity landscape evolves, so do the tools and techniques used to secure applications. There are several commonly referred to as best practices and application security tools to mitigate cybersecurity threats. AppSec Reports are one of the most widely used tools that are used as a reference to manage, monitor, and mitigate security threats throughout an application&rsquo;s lifecycle.&nbsp;

What are they?

Cybersecurity researchers and ethical hackers prepare an application security report highlighting top attack vectors, key security risks, and gaps. The document requires cybersecurity experts to look in-depth at how an organization implements system and network security, performs ethical hacking and penetration tests, and then record their findings.&nbsp;

The report documents the latest AppSec trends, tools, and best practices to protect network infrastructure, system, and user data through comprehensive surveys. Due to the significance of its real-time data points, an AppSec Report is considered a valuable source to help security teams prioritize identifying, fixing, and eliminating attack vectors at the application level.

الخبراء

مكان الهاكرز الاول. تعلم، تعاون، واكسب دراهم

الخبراء

مكان الهاكرز الاول. تعلم، تعاون، واكسب دراهم

ساهم في حماية العالم

ابنِ سيرتك الذاتية

أرقام الهاكرز

انضم الى مجتمع الهاكرز

10+

500+

100+

النشرة الإخبارية

المدونات

مدونات للمجتمع

٢٤ أغسطس ٢٠٢٣

حل لتحدي البرشوت

٥ سبتمبر ٢٠٢٣

استقبل اخر اخبار ترست لاين في صندوق بريدك الإلكتروني