praneeth132006

Demonstrate self-hosted CI runner abuse (CICD-SEC-7, insecure system configuration) during an authorized assessment — abusing a…

Detect broken access control — IDOR/BOLA and missing function-level checks — against a web application from authorization decisions…

Harden a web application's authentication and session management against takeover — rate limiting and lockout, MFA, credential-stuffing…

Assess authentication weaknesses in a web application during an authorized test — credential stuffing/brute-force exposure, weak lockout…

Find and prove cross-site request forgery in a web application during an authorized assessment.

Harden a web application against cross-site request forgery with anti-CSRF tokens, SameSite cookies, and origin validation, and detect…

Fingerprint a web application's stack — server, framework, language, WAF, and exposed metadata — during authorized recon.

Find and prove insecure direct object reference / broken object-level authorization (BOLA) in a web application during an authorized…

Confirm and safely demonstrate OS command injection in a web application during an authorized assessment.

Detect OS command injection attempts and successful execution against a web application using request telemetry, process/EDR events, and…

Find and prove path traversal / local file inclusion in a web application during an authorized assessment.

Detect path traversal and local file inclusion attempts and success against a web application from request logs and file-access telemetry.