Phishing-as-a-Service (PHaaS) - A Case Study

Thu, 20 Apr 2023 15:23:03 +0000

Analysis (a.k.a The Facts)

Step 1: Email

The email is as simple as emails go. No fancy HTML/CSS, no more than 4 lines of text:

Dear Taxpayer,

Please find a correspondence letter of summon against your company.

Hacking Node.js legacy URL API

Mon, 07 Sep 2020 19:53:00 +0000

How to bypass hostname verification to exploit allowlist functions

Introduction

Security is essential to us in Kiwi.com as it ensures our customers’ safety. We need to be proactive and search for possible security issues that might affect our business and potentially cause a loss of customers’ trust.

Hacking on code.kiwi.com

Phishing-as-a-Service (PHaaS) - A Case Study

Analysis (a.k.a The Facts)

Step 1: Email

Hacking Node.js legacy URL API

Introduction