Sajjan Nehal

CREST CRT | CREST CPSA | OSCP | Penetration Tester | MSc in Cyber Security | System Administrator | Full Stack Developer

[Sajjan Nehal @SajjanNehal]

I found multiple reflected and stored XSS issues in a real web app: risks, business impact, and secure fixes teams should apply immediately today.

Writeup Link:
https://t.co/ezBVTFz3Vt

#xss #html #injection #websecurity #cybersecurity #infosec #owasp #vulnerability #pentesting

[Sajjan Nehal @SajjanNehal]

Here is how I found two HTML injection bugs in URL parameters on AT&T's website.

Writeup Link:
https://t.co/oULRjssrQG

#injection #html #htmlinjection #att #websecurity #webapplicationsecurity #cybersecurity #infosec #appsec #owasp #penetrationtesting #pentesting

[Sajjan Nehal @SajjanNehal]

Found XSS on BlackBerry’s Official Site – Here’s Why It Matters for Security.
https://t.co/BHxnWHR8uj

#xss #websecurity #webapplicationsecurity #cybersecurity #infosec #appsec #owasp #informationsecurity #vulnerability #penetrationtesting #pentesting

[Sajjan Nehal @SajjanNehal]

How I Discovered an Open Redirect on a Real Web App – and What It Means for Your Security.
https://t.co/vGpCmACxZv

#security #cybersecurity #informationsecurity #webapplicationsecurity #websecurity #vulnerability #openredirect #penetrationtesting #PenTesting

[Sajjan Nehal @SajjanNehal]

@BerksandBucksFA @zebraoutrider @ChalfontSfc Congratulations 🥳 @zebraoutrider

[The Cyber Security Hub™ @TheCyberSecHub]

San Francisco lawmakers approve lethal robots, but they can't carry guns https://t.co/j39GJ7Svvw

[BleepingComputer @BleepinComputer]

British govt is scanning all Internet devices hosted in UK - @serghei
https://t.co/TjoDrpc4Es

[Kaspersky @kaspersky]

ICYMI - whilst useful for those facing targeted attacks from nation states, #Apple's new 'lock down' mode might might actually be more of a hindrance to everyday users.

So what is it, and how does it work? We take a look ⇒ https://t.co/7oowGIjo88