Sahil Dhar

Sahil Dhar is an Information Security Enthusiast having more than two years of hands-on experience in Application Security, Penetration Testing, Vulnerability Assessments and Server Config Reviews. He has also been acknowledged and rewarded by various organizations like Google, Apple, Microsoft, Adobe, Barracuda, Pinterest, Symantec, Oracle etc for finding vulnerabilities in their online services.
Sahil Dhar

Articles from Sahil Dhar

Penetration testing

Finding and exploiting XXE - XML external entities injection

May 30, 2018

In this article, we will have an in-depth look at how to find and exploit XML External Entity Injection vulnerabilities. XXE (XML External Entity) as th

Learn More
Penetration testing

An introduction to penetration testing Node.js applications

March 15, 2018

In this article, we will have a look at how to proceed when penetration testing Node.js applications or looking for Node.js specific issues. Node.js is a

Learn More
Reverse engineering

Exploiting Protostar – Stack 0-3

April 3, 2017

In this article, we will be reverse engineering and exploiting simple C programs from Protostar VM by exploit-exercises.com. We will be mainly focusing at ho

Learn More
Penetration testing

Code Review of Node.Js Applications: Uncommon Flaws

March 16, 2017

This article covers the left-over vulnerabilities from Part-1. In this article, we will have an in-depth look at some uncommon flaws and how to find them whi

Learn More
Capture the flag (CTF)

Hacking IMF – CTFh

February 8, 2017

IMF is yet another awesome boot2root challenge hosted by Vulnhub where one needs to go through various web and some binary exploitation to fetch all flags.

Learn More
Capture the flag (CTF)

Breaking into Fortress DC416 – CTFha

February 6, 2017

In this article, we will be solving fortress VM which is one of the VMS created by Vulnhub team for DEFCON Toronto's 2016 offline CTF. Introduction I picked

Learn More
Penetration testing

Code execution and privilege escalation – Databases

December 1, 2016

In this article, we will have an in depth at some very uncommon techniques for gaining a remote code execution on uncommon databases and escalating privi

Learn More