https://blog.intelligencex.org/rss/category/offensive-security IntelligenceX Cybersecurity Blog - Latest Cyber News, AI & Security Updates - : Offensive Security en © 2026 IntelligenceX Blog. All rights reserved. https://blog.intelligencex.org/owasp-a08-2025-software-data-integrity-failures-guide https://blog.intelligencex.org/owasp-a08-2025-software-data-integrity-failures-guide Mon, 02 Feb 2026 12:03:37 +0530 sbow OWASP Top 10 2025, software integrity failures, data integrity, insecure deserialization, CWE-502, unsigned updates, digital signatures, CI/CD security, supply chain security, SolarWinds vulnerability, 3CX attack, runtime verification, DAST, integrity verification, code signing, serialization vulnerabilities, trust boundaries, software updates, build pipeline security https://blog.intelligencex.org/owasp-a07-2025-authentication-failures-comprehensive-guide https://blog.intelligencex.org/owasp-a07-2025-authentication-failures-comprehensive-guide Thu, 29 Jan 2026 16:15:00 +0530 sbow OWASP Top 10 2025, authentication failures, credential stuffing, password security, multi-factor authentication, MFA, passkeys, FIDO2, passwordless authentication, session management, brute force attacks, identity theft, phishing-resistant authentication, biometric authentication, adaptive MFA, password spray attacks, session hijacking, authentication best practices, hybrid credential stuffing https://blog.intelligencex.org/owasp-a06-2025-insecure-design-complete-guide https://blog.intelligencex.org/owasp-a06-2025-insecure-design-complete-guide Wed, 28 Jan 2026 16:02:11 +0530 sbow OWASP Top 10 2025, insecure design, secure by design, threat modeling, business logic vulnerabilities, STRIDE methodology, PASTA threat modeling, secure design patterns, architectural security flaws, design phase security, abuse cases, business logic abuse, application architecture security, threat modeling tools, secure SDLC, defense in depth, OWASP business logic top 10, secure development lifecycle, design-level vulnerabilities https://blog.intelligencex.org/owasp-a05-2025-injection-vulnerability-guide https://blog.intelligencex.org/owasp-a05-2025-injection-vulnerability-guide Thu, 22 Jan 2026 16:14:35 +0530 sbow OWASP, Injection, SQL Injection, XSS, Command Injection, Application Security, Web Security, Secure Coding, Vulnerability Management, Penetration Testing, Security Testing, Input Validation https://blog.intelligencex.org/owasp-a04-2025-cryptographic-failures-guide https://blog.intelligencex.org/owasp-a04-2025-cryptographic-failures-guide Wed, 21 Jan 2026 18:17:11 +0530 sbow OWASP Top 10 2025, cryptographic failures, data encryption, application security, sensitive data exposure, SSL/TLS, encryption best practices, data protection, security vulnerabilities, cryptography, AES encryption, secure coding, cybersecurity, HTTPS, data security, PKI, key management, secure communications https://blog.intelligencex.org/software-supply-chain-failures-owasp-a03-2025-complete-guide https://blog.intelligencex.org/software-supply-chain-failures-owasp-a03-2025-complete-guide Tue, 20 Jan 2026 15:20:05 +0530 sbow software supply chain failures, OWASP A03, SolarWinds breach, Log4j vulnerability, vulnerable dependencies, malicious packages, SBOM, dependency scanning, npm security, supply chain security, vendor compromise https://blog.intelligencex.org/security-misconfiguration-owasp-a02-2025-complete-guide https://blog.intelligencex.org/security-misconfiguration-owasp-a02-2025-complete-guide Sat, 17 Jan 2026 02:03:36 +0530 sbow security misconfiguration, OWASP A02, default credentials, cloud misconfiguration, open bucket, security headers, configuration hardening, default accounts, vulnerable configurations, infrastructure security https://blog.intelligencex.org/broken-access-control-owasp-a01-2025-complete-guide https://blog.intelligencex.org/broken-access-control-owasp-a01-2025-complete-guide Fri, 16 Jan 2026 03:42:18 +0530 sbow broken access control, OWASP A01, IDOR, privilege escalation, authorization bypass, access control vulnerabilities, parameter tampering, URL manipulation, vertical escalation, horizontal escalation https://blog.intelligencex.org/2fa-bypass-techniques-security-implications-2025 https://blog.intelligencex.org/2fa-bypass-techniques-security-implications-2025 Thu, 15 Jan 2026 03:59:20 +0530 sbow 2FA bypass, two-factor authentication, MFA vulnerabilities, SMS OTP, authenticator app, phishing, SIM swap, push notification, brute force, security implications https://blog.intelligencex.org/jwt-vulnerabilities-testing-guide-2025-algorithm-confusion https://blog.intelligencex.org/jwt-vulnerabilities-testing-guide-2025-algorithm-confusion Fri, 09 Jan 2026 03:56:42 +0530 sbow JWT vulnerabilities, algorithm confusion, RS256 to HS256, JWT testing, token forgery, signature bypass, none algorithm, key injection, jku parameter, kid parameter, BOLA, BFLA, JWT security testing, penetration testing https://blog.intelligencex.org/google-dorking-bug-bounty-penetration-testing-osint-guide https://blog.intelligencex.org/google-dorking-bug-bounty-penetration-testing-osint-guide Thu, 08 Jan 2026 02:33:19 +0530 sbow Google dorking, Google hacking, OSINT, bug bounty reconnaissance, search operators, inurl, filetype, intitle, site operator, subdomain enumeration, exposed credentials, security testing, penetration testing dorks https://blog.intelligencex.org/local-file-inclusion-lfi-vulnerabilities-complete-guide https://blog.intelligencex.org/local-file-inclusion-lfi-vulnerabilities-complete-guide Tue, 06 Jan 2026 04:07:08 +0530 sbow local file inclusion, LFI vulnerability, directory traversal, path traversal, PHP wrappers, file inclusion bypass, web application security, penetration testing, OWASP top 10, vulnerability testing, security assessment https://blog.intelligencex.org/android-application-penetration-testing-complete-guide-2025 https://blog.intelligencex.org/android-application-penetration-testing-complete-guide-2025 Tue, 30 Dec 2025 23:39:40 +0530 sbow Android penetration testing, Android security testing, SSL pinning bypass, root detection bypass, mobile app security, Frida, JADX, Burp Suite, insecure data storage, OWASP MASTG, MITRE ATT&CK, Android vulnerability testing, mobile security assessment https://blog.intelligencex.org/nosql-injection-vulnerabilities-complete-guide https://blog.intelligencex.org/nosql-injection-vulnerabilities-complete-guide Fri, 26 Dec 2025 23:37:38 +0530 sbow NoSQL injection, MongoDB injection, NoSQL security testing, database security, injection vulnerabilities, authentication bypass, NoSQL operators, query injection, web application security, database exploitation, MongoDB security https://blog.intelligencex.org/cloud-reconnaissance-gather-intelligence-from-cloud-services https://blog.intelligencex.org/cloud-reconnaissance-gather-intelligence-from-cloud-services Wed, 17 Dec 2025 18:02:47 +0530 Root cloud reconnaissance, cloud osint, cloud security, aws reconnaissance, azure reconnaissance, gcp reconnaissance, cloud asset discovery, cloud misconfiguration, osint cloud services, cloud attack surface https://blog.intelligencex.org/tales-from-the-waf-attacking-web-application-firewalls-from-a-real-world-perspective https://blog.intelligencex.org/tales-from-the-waf-attacking-web-application-firewalls-from-a-real-world-perspective Tue, 16 Dec 2025 12:33:15 +0530 flatline Web Application Firewall, WAF, WAF Bypass, Hacking, Offensive Security, Payloads, Penetration Testing https://blog.intelligencex.org/zero-day-hunting-advanced-recon-techniques-2025 https://blog.intelligencex.org/zero-day-hunting-advanced-recon-techniques-2025 Fri, 12 Dec 2025 04:26:31 +0530 sbow zero-day hunting, advanced recon techniques, bug bounty recon, JavaScript endpoint discovery, ASN enumeration, cloud bucket hunting, GitHub secrets, behavioral detection, OSINT techniques, vulnerability discovery https://blog.intelligencex.org/react2shell-ultimate-nextjs-rce-scanner-cve-2025-66478 https://blog.intelligencex.org/react2shell-ultimate-nextjs-rce-scanner-cve-2025-66478 Sat, 06 Dec 2025 22:49:08 +0530 Jack Barlow Next.js, React, RCE, CVE-2025-66478, Offensive Security, Red Team Tools, RSC Vulnerability, JS Security, Scanners https://blog.intelligencex.org/osint-reconnaissance-malware-analysis https://blog.intelligencex.org/osint-reconnaissance-malware-analysis Fri, 07 Nov 2025 02:26:00 +0530 Root OSINT, malware analysis, cyber threat intelligence, reconnaissance, IOC enrichment, malware research, threat hunting, cybersecurity blog, MITRE ATT&CK https://blog.intelligencex.org/oauth-misconfiguration-vulnerabilities-attacks-prevention-guide https://blog.intelligencex.org/oauth-misconfiguration-vulnerabilities-attacks-prevention-guide Fri, 07 Nov 2025 02:22:27 +0530 sbow OAuth misconfiguration, OAuth 2.0 security, redirect URI vulnerability, authorization code interception, OAuth CSRF attack, PKCE bypass, implicit flow vulnerabilities, OAuth token leakage, authentication security, API security https://blog.intelligencex.org/osint-more-than-googling https://blog.intelligencex.org/osint-more-than-googling Fri, 29 Aug 2025 17:03:34 +0530 Root “OSINT isn’t just glorified Googling — it uses deep, systematic methods, verification, and advanced tools to uncover intelligence across the surface, deep, and dark web.” https://blog.intelligencex.org/dell-reconnaissance-osint-bug-bounty https://blog.intelligencex.org/dell-reconnaissance-osint-bug-bounty Thu, 28 Aug 2025 17:33:27 +0530 Root