zakirkun
- 224 skills
- 0 followers
- last month last updated
- ▌ Hardcoded Credentials Detection · zakirkun bundleDetects hardcoded passwords, API keys, and tokens in source code
- ▌ Insecure Cookie Configuration · zakirkun bundleDetects cookies set without Secure, HttpOnly, or SameSite attributes.
- ▌ Insecure Password Storage · zakirkun bundleDetects passwords stored in plaintext or hashed with weak/unsalted algorithms instead of bcrypt/argon2/scrypt.
- ▌ Secrets In Environment Files And Configuration · zakirkun bundleDetects sensitive secrets hardcoded in .env files, configuration files, and infrastructure definitions that may be committed to version control.
- ▌ Timing Attack Vulnerability · zakirkun bundleDetects comparison operations on secrets using non-constant-time functions, enabling timing side-channel attacks.
- ▌ CI CD Pipeline Secrets Exposure · zakirkun bundleDetects secrets hardcoded in CI/CD configuration files (GitLab CI, GitHub Actions, CircleCI, Jenkins).
- ▌ Unsafe Temporary File Creation · zakirkun bundleDetects creation of temporary files with predictable names or in world-writable locations, enabling symlink attacks and race conditions.
- ▌ Format String Vulnerability · zakirkun bundleDetects format string vulnerabilities where user-controlled input is passed directly as the format argument to printf-family functions.
- ▌ Heap Buffer Overflow · zakirkun bundleDetects heap buffer overflows from unsafe memory operations and insufficient size validation.
- ▌ Iframe Injection · zakirkun bundleDetects user-controlled content injected into iframe src attributes, enabling page embedding of malicious content.
- ▌ Sensitive Url In Referrer Header · zakirkun bundleDetects pages that expose sensitive parameters (tokens, IDs) in URLs that get leaked via the Referer header to external resources.
- ▌ Missing Security Headers · zakirkun bundleDetects missing or misconfigured HTTP security headers that protect against common browser-based attacks.
- ▌ Session Fixation · zakirkun bundleDetects missing session regeneration after login, allowing session fixation attacks.
- ▌ Hardcoded Salt In Password Hashing · zakirkun bundleDetects hardcoded or static salt values used in password hashing, allowing precomputed rainbow table attacks.
- ▌ Insecure Key Derivation · zakirkun bundleDetects passwords used directly as encryption keys or hashed with fast algorithms instead of proper KDFs (PBKDF2, bcrypt, Argon2, scrypt).
- ▌ Insecure Docker Configuration · zakirkun bundleDetects dangerous Docker and Docker Compose configurations including privileged containers, secrets in environment variables, and running as root.
- ▌ Verbose Error Messages Exposed To Clients · zakirkun bundleDetects stack traces, exception details, and internal error information sent in HTTP responses to end users.
- ▌ Stack Overflow Vulnerability · zakirkun bundleDetects code patterns that can cause stack overflows via unbounded recursion or excessive stack allocation.
- ▌ Use After Free · zakirkun bundleDetects potential use-after-free vulnerabilities where memory is accessed after being freed.
- ▌ Dns Rebinding Vulnerability · zakirkun bundleDetects server-side host validation logic vulnerable to DNS rebinding attacks, allowing attackers to bypass IP-based restrictions.
- ▌ Ftp Cleartext Communication · zakirkun bundleDetects use of FTP protocol which transmits credentials and data in cleartext.
- ▌ Extended Ssrf Detection Cloud Metadata Protocol Exploits · zakirkun bundleDetects SSRF vulnerabilities targeting cloud metadata services, internal networks, and non-HTTP protocols.
- ▌ Command Injection · zakirkun bundleDetects untrusted input passed directly to operating system shell commands.
- ▌ Missing Input Size Limits · zakirkun bundleDetects API endpoints without request body size limits, enabling denial of service via oversized payloads.
- ▌ JWT Without Expiration · zakirkun bundleDetects JWTs issued without expiration claims, creating tokens that remain valid indefinitely.
- ▌ Hardcoded Secrets · zakirkun bundleDetects API keys, passwords, and tokens embedded directly in the source code.
- ▌ Orm Raw Query Injection · zakirkun bundleDetects raw SQL queries embedded within ORM frameworks that bypass parameterization, reintroducing SQL injection risk.
- ▌ Redis Without Authentication · zakirkun bundleDetects Redis connections and configurations without authentication, allowing unauthenticated access to the cache.
- ▌ Buffer Overflow · zakirkun bundleDetects unsafe C/C++ functions that copy data without bounds checking, enabling stack and heap buffer overflows.
- ▌ Ipv6 Tunneling And Misconfiguration · zakirkun bundleDetects network configurations that fail to apply security controls to IPv6, allowing bypass via IPv6 tunneling.
- ▌ Smtp Command Injection · zakirkun bundleDetects user-controlled input in SMTP commands that can inject malicious SMTP commands via CRLF sequences.
- ▌ Framework Specific Dom Xss · zakirkun bundleDetects the use of dangerous API methods in modern frontend frameworks (React, Vue, Angular) that can lead to Cross-Site Scripting (XSS).
- ▌ Server Timing Information Leak · zakirkun bundleDetects Server-Timing headers that expose internal component names and timing data to clients.
- ▌ Subdomain Takeover Risk · zakirkun bundleDetects CNAME records pointing to cloud services that may be dangling, and configurations referencing external services vulnerable to takeover.
- ▌ Websocket Security Issues · zakirkun bundleDetects insecure WebSocket implementations including missing origin validation, lack of authentication, and message injection risks.
- ▌ Concurrent Session Issues · zakirkun bundleDetects missing concurrent session controls that allow multiple active sessions or fail to invalidate old sessions on new login.
- ▌ Unencrypted Database · zakirkun bundleDetects database configurations and connections missing encryption at rest and in transit.
- ▌ Hardcoded Secrets In Makefiles · zakirkun bundleDetects API keys, tokens, and passwords hardcoded in Makefile targets and variables.
- ▌ CSV Formula Injection Spreadsheet Injection · zakirkun bundleDetects user-controlled data written to CSV files without sanitization, enabling formula injection in spreadsheet applications.
- ▌ Log Injection · zakirkun bundleDetects user-controlled input written to log files without sanitization, enabling log forging and potential log viewer attacks.
- ▌ PDF Document Injection · zakirkun bundleDetects user input embedded in PDF or document generation without sanitization, enabling XSS through PDF rendering and data exfiltration.
- ▌ SQL Injection Detection · zakirkun bundleDetects SQL injection vulnerabilities where user input is concatenated into SQL queries
- ▌ Server Side Include Ssi Injection · zakirkun bundleDetects user-controlled input reflected in pages processed by SSI, enabling file disclosure and command execution.
- ▌ XML External Entity Xxe Injection · zakirkun bundleDetects XML parsers configured to process external entities, enabling file disclosure and SSRF.
- ▌ Integer Overflow Underflow · zakirkun bundleDetects arithmetic operations that can overflow or underflow integer bounds, leading to heap overflows, logic bypasses, or unexpected behavior.
- ▌ IOS App Transport Security Ats Disabled · zakirkun bundleDetects iOS ATS exceptions that allow insecure HTTP connections or disable certificate validation.
- ▌ Insecure Network Socket · zakirkun bundleDetects plain TCP sockets without TLS wrapping used for sensitive network communication.
- ▌ Prototype Pollution · zakirkun bundleDetects JavaScript prototype pollution vulnerabilities where attacker-controlled keys can modify Object.prototype.
- ▌ Web Cache Deception · zakirkun bundleDetects server configurations that may serve personalized content under cacheable URLs, enabling web cache deception attacks.
- ▌ Missing Or Incorrect Content Type Validation · zakirkun bundleDetects API endpoints that do not validate or enforce Content-Type headers, enabling MIME-type confusion and CSRF attacks.
- ▌ Information Exposure Via Errors · zakirkun bundleDetects raw error stacks or generic exception details being directly returned in HTTP responses.
- ▌ Account Enumeration · zakirkun bundleDetects authentication and registration endpoints that reveal whether a username or email exists, enabling targeted attacks.
- ▌ Insecure Login Form · zakirkun bundleDetects login forms served over HTTP, with autocomplete enabled for password fields, or without CSRF protection.
- ▌ Mongodb Without Authentication · zakirkun bundleDetects MongoDB connections without authentication credentials or configurations that disable authorization.
- ▌ Insecure Container Registry Configuration · zakirkun bundleDetects Docker/container registry configurations using unauthenticated or HTTP (non-HTTPS) registries.
- ▌ Code Injection Eval Dynamic Execution · zakirkun bundleDetects user-controlled input passed to code evaluation functions like eval, exec, or dynamic code generation.
- ▌ HTML Injection · zakirkun bundleDetects user-controlled input reflected in HTML without proper encoding, enabling HTML injection that may not execute scripts but can redirect or spoof content.
- ▌ Ldap Injection · zakirkun bundleDetects LDAP queries constructed from user input without proper escaping, enabling authentication bypass and data exfiltration.
- ▌ Ognl Injection Apache Struts · zakirkun bundleDetects Apache Struts and other OGNL-using frameworks vulnerable to expression injection through request parameters.
- ▌ Cors Private Network Access Misconfiguration · zakirkun bundleDetects CORS configurations that allow access from public origins to private network endpoints.
- ▌ Insecure Postmessage Configuration · zakirkun bundleDetects careless use of the HTML5 Web Messaging API (postMessage), such as sending messages to the generic '*' origin.
- ▌ Broken API Versioning Security · zakirkun bundleDetects API versioning patterns where newer security controls do not apply to older API versions still in use.
- ▌ Authentication Bypass Patterns · zakirkun bundleDetects common authentication bypass patterns including type juggling, SQL truncation, and logic flaws.
- ▌ Password Reset Vulnerabilities · zakirkun bundleDetects insecure password reset implementations including predictable tokens, missing expiration, and host header injection in reset links.
- ▌ Privilege Escalation Through Code Logic · zakirkun bundleDetects code patterns that allow users to elevate their own privileges through API manipulation or mass assignment.
- ▌ Insecure Remember Me Persistent Session · zakirkun bundleDetects insecure persistent login implementations using predictable tokens or insufficient expiration policies.
- ▌ Insecure Diffie Hellman Parameters · zakirkun bundleDetects use of weak Diffie-Hellman parameters (< 2048 bits, export-grade, or known broken groups).
- ▌ Insecure Prng Seed · zakirkun bundleDetects cryptographic operations where pseudo-random number generators are seeded with predictable values.
- ▌ Insecure Random Iv Generation · zakirkun bundleDetects initialization vectors generated using non-cryptographic random functions, compromising cipher security.
- ▌ Weak JWT Algorithm · zakirkun bundleDetects JWT usage with weak or insecure signing algorithms including HS256 with short secrets, RS256 key confusion, and algorithm downgrade.
- ▌ CI CD Pipeline Code Injection · zakirkun bundleDetects CI/CD pipeline scripts that incorporate untrusted input into shell commands, enabling pipeline injection attacks.
- ▌ Default Credentials · zakirkun bundleDetects use of common default usernames and passwords in application configuration and code.
- ▌ Email Header Injection · zakirkun bundleDetects email sending functions that include user input in email headers without CRLF stripping, enabling spam relay and header manipulation.
- ▌ Nosql Injection · zakirkun bundleDetects NoSQL query injection vulnerabilities in MongoDB, Redis, and other NoSQL databases.
- ▌ Xpath Injection · zakirkun bundleDetects XPath queries built from user input without escaping, enabling authentication bypass and data disclosure.
- ▌ Null Pointer Dereference · zakirkun bundleDetects code that dereferences pointers or return values that could be NULL without validation, causing crashes or privilege escalation.
- ▌ Cleartext Network Traffic · zakirkun bundleDetects unencrypted HTTP connections for transmitting sensitive data, credentials, or API calls.
- ▌ Browser History Visited Link Theft · zakirkun bundleDetects CSS-based browser history sniffing patterns and sensitive data in browser history.
- ▌ Extended Clickjacking Detection · zakirkun bundleDetects advanced clickjacking vulnerabilities including UI redressing via transparent overlays and framebusting bypasses.
- ▌ Content Type Sniffing Vulnerability · zakirkun bundleDetects missing X-Content-Type-Options header and incorrect Content-Type that allows MIME sniffing attacks.
- ▌ Cors Misconfiguration · zakirkun bundleDetects insecure Cross-Origin Resource Sharing configurations that allow unauthorized cross-origin access.
- ▌ Host Header Injection · zakirkun bundleDetects applications that use the HTTP Host header for URL generation, password reset links, or routing without validation.
- ▌ Android Intent Redirection · zakirkun bundleDetects Android intent redirection vulnerabilities where attacker-controlled intents are re-sent or forwarded, enabling privilege escalation.
- ▌ Android Webview Javascript Risks · zakirkun bundleDetects insecure Android WebView configurations enabling XSS, JavaScript bridge abuse, and remote code execution.
- ▌ Sensitive Data In Localstorage · zakirkun bundleDetects potential storage of sensitive credentials or JWTs directly in the browser's localStorage or sessionStorage.
- ▌ AWS Misconfiguration · zakirkun bundleDetects common AWS security misconfigurations including public S3 buckets, IAM wildcard policies, hardcoded AWS credentials, and unencrypted resources.
- ▌ GCP Misconfiguration · zakirkun bundleDetects common Google Cloud Platform security misconfigurations including public storage buckets, overprivileged service accounts, and disabled audit logging.
- ▌ Database Backup File Exposure · zakirkun bundleDetects database backup files stored in web-accessible directories or referenced with predictable names.
- ▌ Database Error Information Exposure · zakirkun bundleDetects database errors and query details sent directly to HTTP responses, leaking schema information.
- ▌ Path Traversal Extended · zakirkun bundleDetects unsafe file writing or dynamic inclusions leading to LFI/path traversal.
- ▌ Kubernetes Misconfiguration · zakirkun bundleDetects insecure Kubernetes pod and container configurations including privileged containers, hostPID, hostNetwork, and missing resource limits.
- ▌ HTTP Header Injection Crlf Injection · zakirkun bundleDetects user-controlled data written into HTTP response headers without CRLF stripping, enabling header injection and response splitting.
- ▌ Pii In Analytics Events · zakirkun bundleDetects PII being sent to analytics platforms like Google Analytics, Mixpanel, or Amplitude in event properties.
- ▌ File Time Of Check Time Of Use Toctou · zakirkun bundleDetects file operations that check file properties before using them, creating a race window exploitable via symlink attacks.
- ▌ Typosquatting Package Names · zakirkun bundleDetects imports of known typosquatting package names that mimic popular packages with malicious intent.
- ▌ HTTP Request Smuggling · zakirkun bundleDetects HTTP response headers and server configurations vulnerable to request smuggling via Transfer-Encoding/Content-Length discrepancies.
- ▌ Android Insecure Certificate Validation · zakirkun bundleDetects Android TrustManager implementations that accept all certificates, disabling SSL/TLS security.
- ▌ Android Exported Components Without Permission · zakirkun bundleDetects Android Activities, Services, BroadcastReceivers, and ContentProviders exported without proper permission checks.
- ▌ Excessive Data Exposure In API Responses · zakirkun bundleDetects API endpoints that return more data than required, including sensitive fields that clients should not receive.
- ▌ Missing Brute Force Protection · zakirkun bundleDetects login and authentication endpoints that lack rate limiting, account lockout, or CAPTCHA protection.