Web Security on SOPHY'S CYBERLABhttps://xblankzgap.github.io/cyber-portfolio/tags/web-security/Recent content in Web Security on SOPHY'S CYBERLABHugoen-usSun, 05 Apr 2026 10:00:00 +0100Web-to-System Pivot via Command Injectionhttps://xblankzgap.github.io/cyber-portfolio/posts/web-to-system-pivot-reverse-shell/Tue, 30 Sep 2025 10:00:00 +0100https://xblankzgap.github.io/cyber-portfolio/posts/web-to-system-pivot-reverse-shell/<p><strong>Objective:</strong> To exploit a Command Injection vulnerability in a web application to bypass input filters and establish a persistent Remote Shell.</p>Session Hijacking via Automated Cookie Exfiltrationhttps://xblankzgap.github.io/cyber-portfolio/posts/session-hijacking-cookie-exfiltration/Sun, 05 Apr 2026 10:00:00 +0100https://xblankzgap.github.io/cyber-portfolio/posts/session-hijacking-cookie-exfiltration/<p><strong>Objective:</strong> To demonstrate the ease of unauthorized cookie acquisition and subsequent account compromise using browser-based exfiltration tools.</p>Insecure Direct Object Reference (IDOR) & Path Traversal Discoveryhttps://xblankzgap.github.io/cyber-portfolio/posts/idor-path-traversal-discovery/Mon, 15 Dec 2025 10:00:00 +0100https://xblankzgap.github.io/cyber-portfolio/posts/idor-path-traversal-discovery/<p><strong>Objective:</strong> To identify and verify directory traversal vulnerabilities that allow unauthorized access to sensitive system files.</p>