https://thuri10.github.io/authors/thuri/Thuri - Author - LaByteHugo -- gohugo.ioen-usthuri@thuri.dev (Thuri)thuri@thuri.dev (Thuri)Wed, 03 Sep 2025 00:59:32 +0300https://thuri10.github.io/posts/deserialization/Wed, 03 Sep 2025 00:59:32 +0300Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/deserialization/Insecure deserialization occurs when attacker-controlled data is deserialized by the website, allowing an attacker to manipulate serialized objects in order to pass harmful data.https://thuri10.github.io/posts/xsslabs/Thu, 21 Aug 2025 12:59:32 +0300Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/xsslabs/Cross-site scripting (XSS) is a web security vulnerability that allows an attacker to compromise interactions that users have with the vulnerable application.https://thuri10.github.io/posts/drozer/Sat, 30 Mar 2024 11:37:15 +0300Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/drozer/Drozer is an Android security test framework developed by WithSecure Labs to test security vulnerabilities in Android applications and devices by assuming the role of the target application and interaction with Android Runtime, other applications IPC.https://thuri10.github.io/posts/vulnerable-graphql/Thu, 15 Dec 2022 14:27:14 +0000Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/vulnerable-graphql/GraphQL is an open source, data query and manipulation language for APIs. It enables serving API data for both mobile and web applications. GraphQL is an alternative to REST and grPc.https://thuri10.github.io/posts/informationdisclosure/Mon, 31 Oct 2022 14:27:14 +0000Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/informationdisclosure/Information disclosure is a web vulnerability that allows leakage of sensitive information to it’s users. Information leaked may include other user’s sensitive information, passwords and username, Intellectual property, source code, etc depending on the context of the application.https://thuri10.github.io/posts/directory-traversal/Mon, 24 Oct 2022 14:27:14 +0000Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/directory-traversal/Directory traversal is a web vulnerability that allows an attacker to access unauthorized resources outside the root server directory due to the way server handles files.https://thuri10.github.io/posts/reverse-c-templates/Sat, 16 Jul 2022 14:27:14 +0000Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/reverse-c-templates/Template is a c++ entity that accepts different data types but performs the same functionality.https://thuri10.github.io/posts/redlinestealer-stealer/Mon, 07 Feb 2022 14:27:14 +0000Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/redlinestealer-stealer/Redline malware is an Information Stealer written in c#, targeting windows victims. It is used for gathering victims information ranging from the Browser cookies, saved credentials, Discord tokens, OS information,Languages, VPN profiles, Installed Programs and Network configurations.https://thuri10.github.io/posts/remcosrat-macros/Tue, 25 Jan 2022 14:27:14 +0000Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/remcosrat-macros/RemcosRAT is a Fileless multi-stage malware that is distributed through malicious macros in Excel files. The malware enables remote administration of infected systems to perform unintended actionshttps://thuri10.github.io/posts/rop-callme/Mon, 20 Dec 2021 14:27:14 +0000Thurihttps://thuri10.github.io/authors/thuri/https://thuri10.github.io/posts/rop-callme/RopEmporium - callme goal is understanding how more than one argument is passed in x64 function.