https://offensive360.com/ Vulnerability research (CVE write-ups), secure-coding guides and application security tooling from Offensive360: SAST, DAST, MAST, ASM and autonomous red teaming. en Thu, 05 Nov 2026 16:39:10 GMT https://offensive360.com/blog/cors-allow-credentials-wildcard-origin/ https://offensive360.com/blog/cors-allow-credentials-wildcard-origin/ Thu, 29 Oct 2026 00:00:00 GMT Vulnerability Research CORS wildcard + credentials is blocked by browsers — use an explicit origin allowlist, not reflected Origin. The reflected-origin workaround is a CWE-942 flaw. https://offensive360.com/blog/dotnet-static-code-analysis-tools/ https://offensive360.com/blog/dotnet-static-code-analysis-tools/ Thu, 29 Oct 2026 00:00:00 GMT Tools & Comparisons Best .NET static code analysis tools ranked by taint depth: Roslyn free tier, Checkmarx, Fortify and Offensive360 — ASP.NET Core, pricing and CI/CD setup. https://offensive360.com/blog/owasp-juice-shop-guide/ https://offensive360.com/blog/owasp-juice-shop-guide/ Thu, 29 Oct 2026 00:00:00 GMT Application Security OWASP Juice Shop: start in 60 s with Docker, explore 100+ challenges across all OWASP Top 10 categories, run the online demo, and benchmark any DAST scanner. https://offensive360.com/blog/what-is-second-order-sql-injection-owasp/ https://offensive360.com/blog/what-is-second-order-sql-injection-owasp/ Thu, 29 Oct 2026 00:00:00 GMT Vulnerability Research Second-order SQL injection: payload stored in one request, executed in another. OWASP definition, PHP/Python/C# examples and the parameterized query fix. https://offensive360.com/blog/android-security-testing-tools/ https://offensive360.com/blog/android-security-testing-tools/ Wed, 28 Oct 2026 00:00:00 GMT Application Security MobSF, apkgui.io, JADX, Frida and Drozer compared for Android APK security testing. Static analysis, runtime hooking and OWASP Mobile Top 10 coverage. https://offensive360.com/blog/second-order-sql-injection/ https://offensive360.com/blog/second-order-sql-injection/ Wed, 28 Oct 2026 00:00:00 GMT Vulnerability Research Second-order SQL injection stores a payload safely, fires it in a later query, and bypasses most scanners. How it works, PHP/Python/Java examples and the fix. https://offensive360.com/blog/csharp-static-code-analysis-tools/ https://offensive360.com/blog/csharp-static-code-analysis-tools/ Tue, 27 Oct 2026 00:00:00 GMT Tools & Comparisons C# SAST tools ranked by taint-analysis depth: Roslyn (free), SonarQube, Checkmarx, Fortify and Offensive360. ASP.NET Core support, on-prem options and pricing. https://offensive360.com/blog/php2shell-cve-2026-109618-109619/ https://offensive360.com/blog/php2shell-cve-2026-109618-109619/ Wed, 21 Oct 2026 00:00:00 GMT Vulnerability Research PHP2Shell is a critical unauthenticated RCE in the PHP runtime (CVSS 9.2). Who is affected, fixed versions, interim hardening, detection and verification. https://offensive360.com/blog/hardcoded-credentials-vulnerability-cwe-798/ https://offensive360.com/blog/hardcoded-credentials-vulnerability-cwe-798/ Sat, 17 Oct 2026 00:00:00 GMT Vulnerability Research CWE-798 in Checkmarx, Fortify or Veracode? Remediate hardcoded credentials in Java, Python, C# and Node.js, rotate the secret, and clean Git history. https://offensive360.com/blog/fortify-static-code-analyzer-pricing/ https://offensive360.com/blog/fortify-static-code-analyzer-pricing/ Wed, 07 Oct 2026 00:00:00 GMT Tools & Comparisons Fortify SCA: $50K–$200K+/yr for SAST alone. Add SSC, WebInspect and support and total cost hits $350K+/yr. 2026 pricing breakdown and cheaper alternatives. https://offensive360.com/blog/owasp-juice-shop-online-demo-hosted/ https://offensive360.com/blog/owasp-juice-shop-online-demo-hosted/ Wed, 07 Oct 2026 00:00:00 GMT Application Security OWASP Juice Shop online options: official demo, TryHackMe private instance, Gitpod - or run your own private Docker instance in under 60 seconds. https://offensive360.com/blog/owasp-juice-shop-file-434-challenge/ https://offensive360.com/blog/owasp-juice-shop-file-434-challenge/ Tue, 06 Oct 2026 00:00:00 GMT Application Security Juice Shop file-434 challenge: get /ftp/acquisitions.md (1-star) and bypass the 403 on package.json.bak using null byte injection (%2500.md) for the 3-star. https://offensive360.com/blog/checkmarx-pricing-license-cost-2026/ https://offensive360.com/blog/checkmarx-pricing-license-cost-2026/ Sun, 04 Oct 2026 00:00:00 GMT Tools & Comparisons Checkmarx: $800–$2,000+/dev/year. 100-dev team hits $150K–$250K+ once DAST and SCA are added. Real contract ranges, hidden fees and alternatives explained. https://offensive360.com/blog/owasp-juice-shop-challenge-solutions/ https://offensive360.com/blog/owasp-juice-shop-challenge-solutions/ Sun, 04 Oct 2026 00:00:00 GMT Application Security OWASP Juice Shop challenge solutions 1-5 stars: SQL injection login bypass, JWT algorithm confusion, XSS, IDOR, XXE - exact payloads with full explanations. https://offensive360.com/blog/owasp-juice-shop-alternatives/ https://offensive360.com/blog/owasp-juice-shop-alternatives/ Mon, 21 Sep 2026 00:00:00 GMT Application Security 9 Juice Shop alternatives: DVWA, WebGoat, bWAPP, NodeGoat and more. Ranked by language, SAST/DAST benchmarking fit and difficulty - Docker commands included. https://offensive360.com/blog/owasp-juice-shop-jwt-challenges/ https://offensive360.com/blog/owasp-juice-shop-jwt-challenges/ Thu, 10 Sep 2026 00:00:00 GMT Application Security Solve OWASP Juice Shop's JWT challenges step by step: forge admin tokens using alg:none, RS256→HS256 confusion, and weak secret brute-force - with fixes. https://offensive360.com/blog/autonomous-red-teaming-vs-ai-penetration-testing/ https://offensive360.com/blog/autonomous-red-teaming-vs-ai-penetration-testing/ Tue, 08 Sep 2026 00:00:00 GMT Offensive Security Autonomous red teaming vs AI pentest engagements vs manual pentests in 2026: XBOW, NodeZero, Pentera, Terra Security and Offensive360 compared honestly. https://offensive360.com/blog/best-attack-surface-management-tools/ https://offensive360.com/blog/best-attack-surface-management-tools/ Tue, 08 Sep 2026 00:00:00 GMT Attack Surface Management Honest 2026 guide to ASM tools: Offensive360, Cortex Xpanse, Defender EASM, CyCognito, Censys, runZero, Detectify. Validation, monitoring, data residency. https://offensive360.com/blog/owasp-juice-shop-beginner-walkthrough/ https://offensive360.com/blog/owasp-juice-shop-beginner-walkthrough/ Mon, 07 Sep 2026 00:00:00 GMT Application Security Step-by-step OWASP Juice Shop walkthrough for beginners: find the scoreboard, crack the login with SQL injection, solve XSS and IDOR. https://offensive360.com/blog/web-application-security-testing-guide/ https://offensive360.com/blog/web-application-security-testing-guide/ Fri, 04 Sep 2026 00:00:00 GMT Application Security Web application security testing explained: SAST, DAST, SCA, penetration testing - when to use each, what they find. https://offensive360.com/blog/application-security-audit-checklist/ https://offensive360.com/blog/application-security-audit-checklist/ Thu, 03 Sep 2026 00:00:00 GMT Security Operations 100+ controls covering SAST, DAST, API security, cryptography, HTTP headers, SCA and cloud config — with severity scoring and remediation SLAs for each finding. https://offensive360.com/blog/how-to-prevent-hardcoded-passwords/ https://offensive360.com/blog/how-to-prevent-hardcoded-passwords/ Thu, 03 Sep 2026 00:00:00 GMT Vulnerability Research Stop hardcoded passwords before they reach production: move to env vars or Secrets Manager, add pre-commit hooks, and purge secrets from Git history safely. https://offensive360.com/blog/vulnerable-web-applications-for-security-testing/ https://offensive360.com/blog/vulnerable-web-applications-for-security-testing/ Thu, 03 Sep 2026 00:00:00 GMT Application Security DVWA, Juice Shop, WebGoat and 7 more vulnerable web apps for security testing, ranked by language, use case and scanner-benchmarking fit, with Docker setup. https://offensive360.com/blog/fortify-on-demand-pricing-cost-2026/ https://offensive360.com/blog/fortify-on-demand-pricing-cost-2026/ Tue, 01 Sep 2026 00:00:00 GMT Tools & Comparisons Fortify on Demand pricing: $15K-$150K+/yr by app count. FoD SAST vs DAST cost breakdown, what's excluded, hidden fees and cheaper on-premise alternatives. https://offensive360.com/blog/veracode-pricing-license-cost-2026/ https://offensive360.com/blog/veracode-pricing-license-cost-2026/ Mon, 31 Aug 2026 00:00:00 GMT Tools & Comparisons Veracode SAST: $80K–$120K+/yr for 100 devs — and DAST is a separate add-on. Real 2026 contract ranges, what's excluded, hidden fees and alternatives. https://offensive360.com/blog/how-to-benchmark-dast-scanner-with-juice-shop/ https://offensive360.com/blog/how-to-benchmark-dast-scanner-with-juice-shop/ Sun, 30 Aug 2026 00:00:00 GMT Application Security Benchmark any DAST scanner with OWASP Juice Shop: local setup, authenticated scan configuration, minimum expected findings checklist, and scoring rubric. https://offensive360.com/blog/set-up-security-testing-lab-vulnerable-web-apps/ https://offensive360.com/blog/set-up-security-testing-lab-vulnerable-web-apps/ Thu, 27 Aug 2026 00:00:00 GMT Application Security Set up a local security testing lab: Juice Shop, DVWA, WebGoat & bWAPP in Docker. Isolated network setup, authenticated DAST benchmarking, and practice roadmap. https://offensive360.com/blog/what-is-a-vulnerable-web-application/ https://offensive360.com/blog/what-is-a-vulnerable-web-application/ Thu, 27 Aug 2026 00:00:00 GMT Application Security Deliberately insecure apps like DVWA, Juice Shop & WebGoat let you practice SQLi, XSS, and more legally. Compared and set up with one Docker command. https://offensive360.com/blog/what-is-cors-wildcard-risk/ https://offensive360.com/blog/what-is-cors-wildcard-risk/ Thu, 27 Aug 2026 00:00:00 GMT Vulnerability Research CORS wildcard on authenticated APIs lets any site steal user data. Real attack shown, plus the reflected-origin trap and exact fixes for Node, Python, Java. https://offensive360.com/blog/owasp-juice-shop-t6login-challenge/ https://offensive360.com/blog/owasp-juice-shop-t6login-challenge/ Tue, 25 Aug 2026 00:00:00 GMT Application Security Solve the Juice Shop t6login / Login Morty challenge: find t6_L33t_sPa4n in the JavaScript bundle. https://offensive360.com/blog/vulnerable-web-app-for-pentesting/ https://offensive360.com/blog/vulnerable-web-app-for-pentesting/ Mon, 24 Aug 2026 00:00:00 GMT Application Security Top vulnerable web apps for pentesting in 2026: OWASP Juice Shop, DVWA, HackTheBox, bWAPP & VulnHub. https://offensive360.com/blog/owasp-juice-shop-tryhackme-walkthrough/ https://offensive360.com/blog/owasp-juice-shop-tryhackme-walkthrough/ Sat, 22 Aug 2026 00:00:00 GMT Application Security OWASP Juice Shop TryHackMe walkthrough: step-by-step solutions for every task in the THM room - Brute Force, SQL injection, XSS, IDOR & Broken Auth explained. https://offensive360.com/blog/owasp-juice-shop-sqli-xss-complete-guide/ https://offensive360.com/blog/owasp-juice-shop-sqli-xss-complete-guide/ Mon, 17 Aug 2026 00:00:00 GMT Application Security Juice Shop SQL injection and XSS challenges solved: login bypass, UNION extraction, reflected XSS, stored XSS and DOM XSS - exact payloads with explanations. https://offensive360.com/zerodays/cve-2026-19979-gl-inet-router-firmware/ https://offensive360.com/zerodays/cve-2026-19979-gl-inet-router-firmware/ Mon, 17 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-19979 exposes a WebDAV authorization bypass in 17 GL.iNet router models, allowing remote attackers to access restricted filesystem paths. https://offensive360.com/zerodays/cve-2026-74791-scriban/ https://offensive360.com/zerodays/cve-2026-74791-scriban/ Mon, 17 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-74791: Scriban's TemplateContext.Reset() fails to clear CachedTemplates, enabling cross-request template leakage in multi-tenant applications. https://offensive360.com/blog/sonarqube-alternatives-sast-tools-comparison/ https://offensive360.com/blog/sonarqube-alternatives-sast-tools-comparison/ Sun, 16 Aug 2026 00:00:00 GMT Tools & Comparisons SonarQube does code quality, not taint-analysis SAST. 7 alternatives compared - Checkmarx, Fortify, Veracode, Semgrep, Snyk, CodeQL and Offensive360. https://offensive360.com/zerodays/cve-2026-19821-tenda-ac12-router-firmware/ https://offensive360.com/zerodays/cve-2026-19821-tenda-ac12-router-firmware/ Sun, 16 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-19821 is a remotely exploitable stack buffer overflow in Tenda AC12 firmware 15.03.06.23 that allows attackers to achieve arbitrary code execution. https://offensive360.com/zerodays/cve-2026-72831-grav-cms/ https://offensive360.com/zerodays/cve-2026-72831-grav-cms/ Sun, 16 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-72831 is a broken object-level authorization flaw in Grav's Flex Objects plugin that lets low-privilege admins hijack super-admin accounts. https://offensive360.com/blog/fortify-vs-sonarqube-sast-comparison/ https://offensive360.com/blog/fortify-vs-sonarqube-sast-comparison/ Sat, 15 Aug 2026 00:00:00 GMT Tools & Comparisons Fortify SCA vs SonarQube: taint analysis vs pattern matching. Findings depth, false-positive rates, CI/CD, compliance, pricing and DAST coverage compared. https://offensive360.com/zerodays/cve-2026-19788-tenda-ac1206-router-firmware/ https://offensive360.com/zerodays/cve-2026-19788-tenda-ac1206-router-firmware/ Sat, 15 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-19788: A stack-based buffer overflow in Tenda AC1206 firmware 15.03.06.23 allows remote attackers to execute arbitrary code via the devName parameter. https://offensive360.com/zerodays/cve-2026-19790-tenda-g0-router-firmware/ https://offensive360.com/zerodays/cve-2026-19790-tenda-g0-router-firmware/ Sat, 15 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-19790: A remotely exploitable stack-based buffer overflow in Tenda G0's httpd interface allows attackers to execute arbitrary code. https://offensive360.com/blog/access-control-allow-headers-wildcard/ https://offensive360.com/blog/access-control-allow-headers-wildcard/ Fri, 14 Aug 2026 00:00:00 GMT Vulnerability Research Access-Control-Allow-Headers: * doesn't cover Authorization and breaks with credentials. Browser errors explained + correct CORS header config for Node.js. https://offensive360.com/blog/owasp-juice-shop-vs-portswigger-web-security-academy/ https://offensive360.com/blog/owasp-juice-shop-vs-portswigger-web-security-academy/ Fri, 14 Aug 2026 00:00:00 GMT Application Security OWASP Juice Shop vs Web Security Academy compared: DAST benchmarking, CTF mode, offline use and exactly which to choose at each skill level. https://offensive360.com/zerodays/cve-2026-73615-network-ai/ https://offensive360.com/zerodays/cve-2026-73615-network-ai/ Fri, 14 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-73615: A quote-stripping mismatch in Network-AI lets attackers bypass SandboxPolicy blocklists to execute arbitrary dangerous commands. https://offensive360.com/zerodays/cve-2026-73625-gitpython/ https://offensive360.com/zerodays/cve-2026-73625-gitpython/ Fri, 14 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-73625: GitPython before 3.1.54 allows RCE via kwarg value smuggling that bypasses check_unsafe_options, enabling arbitrary OS command execution. https://offensive360.com/zerodays/cve-2026-57858-cal-com-cal-diy/ https://offensive360.com/zerodays/cve-2026-57858-cal-com-cal-diy/ Thu, 13 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-57858 is a stored XSS flaw in Cal.com's BookingPageTagManager letting event owners inject scripts into public booking pages. https://offensive360.com/zerodays/cve-2026-73031-telegram-search-gramsearch/ https://offensive360.com/zerodays/cve-2026-73031-telegram-search-gramsearch/ Thu, 13 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-73031 is a stored XSS flaw in telegram-search where unsanitized message content passed to v-html enables zero-click JavaScript execution across all. https://offensive360.com/zerodays/cve-2026-71966-cyberpanel/ https://offensive360.com/zerodays/cve-2026-71966-cyberpanel/ Wed, 12 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-71966 is an authenticated command injection in CyberPanel 2.4.3's remote backup feature, enabling full OS takeover via crafted API responses. https://offensive360.com/zerodays/cve-2026-72778-craft-cms/ https://offensive360.com/zerodays/cve-2026-72778-craft-cms/ Wed, 12 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-72778 is an authenticated RCE in Craft CMS control panel where JSON-encoded condition configs bypass sanitization, enabling OS command execution. https://offensive360.com/blog/fortify-vs-checkmarx-vs-sonarqube-sast-comparison/ https://offensive360.com/blog/fortify-vs-checkmarx-vs-sonarqube-sast-comparison/ Tue, 11 Aug 2026 00:00:00 GMT Tools & Comparisons Fortify vs Checkmarx vs SonarQube compared: taint analysis depth, pricing ($50k-$200k vs. free), DAST availability, and why SonarQube alone is not a SAST. https://offensive360.com/blog/owasp-juice-shop-idor-access-control-challenges/ https://offensive360.com/blog/owasp-juice-shop-idor-access-control-challenges/ Tue, 11 Aug 2026 00:00:00 GMT Application Security Solve OWASP Juice Shop's IDOR and broken access control challenges step-by-step: basket manipulation, admin panel access, BOLA in the API. https://offensive360.com/zerodays/cve-2026-69118-cachet/ https://offensive360.com/zerodays/cve-2026-69118-cachet/ Tue, 11 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-69118: Authenticated SSTI in Cachet ≤2.4.1 allows arbitrary PHP execution via malicious incident templates, enabling full server compromise. https://offensive360.com/zerodays/cve-2026-71965-cyberpanel/ https://offensive360.com/zerodays/cve-2026-71965-cyberpanel/ Tue, 11 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-71965: Authenticated RCE in CyberPanel 2.4.3 lets attackers write arbitrary SSH keys to /root/.ssh/authorized_keys via the remote backup feature. https://offensive360.com/zerodays/cve-2026-19342-code-projects-task-management-system/ https://offensive360.com/zerodays/cve-2026-19342-code-projects-task-management-system/ Mon, 10 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-19342 exposes a critical authentication bypass in Task Management System 1.0, allowing remote attackers to gain unauthorized access via SQL injection. https://offensive360.com/zerodays/cve-2026-19343-code-projects-task-management-system/ https://offensive360.com/zerodays/cve-2026-19343-code-projects-task-management-system/ Mon, 10 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-19343 is a HIGH-severity SQL injection in Task Management System 1.0's AdminLogin.php, enabling unauthenticated remote database compromise. https://offensive360.com/zerodays/cve-2026-19341-utt-hiper-1200gw/ https://offensive360.com/zerodays/cve-2026-19341-utt-hiper-1200gw/ Sun, 09 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-19341: A remotely exploitable stack-based buffer overflow in UTT HiPER 1200GW firmware via the EncryptionMode parameter, rated CVSS 8.8 High. https://offensive360.com/zerodays/cve-2026-67620-flowise/ https://offensive360.com/zerodays/cve-2026-67620-flowise/ Sun, 09 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-67620: Flowise ≤3.1.4 SSRF flaw lets attackers bypass metadata endpoint deny-lists to steal OCI and Alibaba Cloud credentials. https://offensive360.com/zerodays/cve-2026-19211-sourcecodester-photo-share-website/ https://offensive360.com/zerodays/cve-2026-19211-sourcecodester-photo-share-website/ Sat, 08 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-19211 exposes a critical SQL injection flaw in SourceCodester Photo Share Website 1.0's signup endpoint, enabling remote data exfiltration. https://offensive360.com/zerodays/cve-2026-19231-sourcecodester-simple-doctors-appointment-system/ https://offensive360.com/zerodays/cve-2026-19231-sourcecodester-simple-doctors-appointment-system/ Sat, 08 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-19231 exposes a critical SQL injection flaw in SourceCodester Simple Doctors Appointment System 1.0. https://offensive360.com/zerodays/cve-2026-43629-llama-cpp/ https://offensive360.com/zerodays/cve-2026-43629-llama-cpp/ Fri, 07 Aug 2026 00:00:00 GMT Vulnerability Research CVE-2026-43629: A heap buffer overflow in llama.cpp's KV cache restore path enables heap corruption and potential code execution via malicious state files.