https://cyberroute.github.io/tags/web/ Recent content in Web on cyberroute Hugo -- gohugo.io en-us cyberroute@proton.me (Alessandro Bresciani) cyberroute@proton.me (Alessandro Bresciani) Tue, 14 Oct 2025 10:10:31 +0200 https://cyberroute.github.io/post/2025-10-14-cors/ Tue, 14 Oct 2025 10:10:31 +0200cyberroute@proton.me (Alessandro Bresciani) https://cyberroute.github.io/post/2025-10-14-cors/ Exploiting CORS Misconfigurations Introduction During a recent security assessment, I discovered a CORS (Cross-Origin Resource Sharing) misconfiguration that allowed complete bypass of the Same-Origin Policy. This vulnerability enabled an attacker to steal sensitive user information including API keys, email addresses, and session tokens from authenticated users. In this guide, I’ll walk you through the complete exploitation process using PortSwigger’s Web Security Academy lab as a practical example. Lab: CORS vulnerability with basic origin reflection https://cyberroute.github.io/post/2024-03-11-bruter/ Mon, 11 Mar 2024 10:10:31 +0200cyberroute@proton.me (Alessandro Bresciani) https://cyberroute.github.io/post/2024-03-11-bruter/ Introduction Bruter is a lightweight application built as an experimental project while learning the Go programming language. Though inspired by the popular Xray tool from GitHub, Bruter introduces its own set of features, tailored specifically for web server testing and configuration validation. Whether you’re a seasoned web administrator or a beginner in cybersecurity, Bruter offers a streamlined way to assess various aspects of web servers with a user-friendly interface. In this blog post, we’ll explore what Bruter does, how it works, and why it might be an essential addition to your web server auditing toolkit.