Vengala Vinay

Having 12+ Years of Experience in Software Development

Home » Security & Compliance » Page 7

Security & Compliance

How We Audited a High-Traffic PHP Enterprise Stack on AWS and Mitigated SQL Injection (SQLi) in customized checkout queries

Deep Dive: Auditing a High-Traffic PHP Enterprise Stack on AWS Our recent engagement involved a critical audit of a high-traffic PHP enterprise application hosted on AWS. The primary objective was to identify and remediate security vulnerabilities, with a specific focus on preventing SQL injection (SQLi) within customized checkout queries. This post details our methodology, findings, […]

An Auditor’s Checklist for Securing C Backends on OVH

I. Network Access Control & Firewall Configuration This section focuses on hardening the network perimeter for C backends hosted on OVH. We’ll examine firewall rules, ingress/egress filtering, and best practices for limiting the attack surface. A. OVH Public Cloud Firewall (Security Groups) OVH’s Public Cloud instances leverage security groups for network access control. A robust […]

How We Audited a High-Traffic WordPress Enterprise Stack on Google Cloud and Mitigated Remote Code Execution (RCE) via insecure file uploads

Initial Reconnaissance and Attack Vector Identification Our engagement began with a deep dive into the existing WordPress enterprise stack deployed on Google Cloud Platform (GCP). The primary concern was a recent spike in suspicious outbound network traffic and intermittent application slowdowns, hinting at a potential compromise. The architecture involved a multi-instance WordPress setup behind a […]

How We Audited a High-Traffic C Enterprise Stack on DigitalOcean and Mitigated insecure memory deallocation leading to information disclosure

Initial Assessment and Threat Landscape Our engagement began with a high-level architectural review of a critical enterprise application stack hosted on DigitalOcean. The primary concern was a recent uptick in suspicious network activity and anecdotal reports of intermittent data leakage, which pointed towards a potential security vulnerability. The stack comprised a PHP-based web application, a […]

How We Audited a High-Traffic Ruby Enterprise Stack on DigitalOcean and Mitigated unsafe YAML loading allowing remote code execution

Initial Reconnaissance and Threat Model Our engagement began with a deep dive into the existing infrastructure. The client, a high-traffic enterprise operating on DigitalOcean, relied heavily on a Ruby on Rails monolith. The primary concern was a recent, albeit unconfirmed, report of a potential vulnerability. Our initial threat model focused on common attack vectors for […]

Mitigating privilege escalation via unpatched plugin endpoints in Custom WordPress Implementations

Identifying Vulnerable Plugin Endpoints Custom WordPress implementations often extend functionality through bespoke plugins or heavily modified third-party plugins. A common attack vector for privilege escalation involves unpatched vulnerabilities within these custom endpoints. These endpoints, typically exposed via AJAX actions or REST API routes, can be inadvertently left open to unauthorized access, allowing attackers to execute […]

How We Audited a High-Traffic Ruby Enterprise Stack on AWS and Mitigated Insecure Deserialization in legacy session handling

Auditing the Legacy Ruby Stack: Initial Reconnaissance and Vulnerability Discovery Our engagement began with a deep dive into a high-traffic Ruby on Rails enterprise application hosted on AWS. The primary objective was to identify and mitigate security vulnerabilities, with a specific focus on insecure deserialization within the legacy session handling mechanism. This often-overlooked area can […]

Mitigating insecure memory deallocation leading to information disclosure in Custom C++ Implementations

Understanding the Vulnerability: Use-After-Free and Information Disclosure Custom C++ implementations, particularly those managing complex data structures or custom memory allocators, are susceptible to a class of vulnerabilities known as “use-after-free” (UAF). This occurs when a program attempts to access memory that has already been deallocated. If this deallocated memory is subsequently reallocated and written to […]

Mitigating OWASP Top 10 Risks: Finding and Patching Buffer overflow vulnerability in high-performance network sockets in C

Understanding Buffer Overflow in Network Sockets Buffer overflows, a classic vulnerability and a significant contributor to OWASP Top 10’s “Vulnerable and Outdated Components” and “Identification and Authentication Failures,” remain a critical threat, especially in high-performance network applications written in C. These vulnerabilities arise when a program attempts to write data beyond the allocated buffer’s boundaries, […]

Recent Posts

Top Categories

Our Products

Our Services