PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Practical Side-Channel Attacks in Web Applications

blog.sentry.security | blog | #pentesting | #web-security | #side-channel | #strapi | #oracle-attack | #bcrypt
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A practical guide to web side-channel attacks (timing signals, response-size leaks, filtering oracles), illustrated by a Strapi case study ending in full bcrypt hash extraction.
Published
Collected

Related coverage

High · vulnerability · bishopfox.com
CVE-2026-27886: Unauthenticated Boolean-Oracle Exfiltration of Administrator Secrets in Strapi
CVE-2026-27886 is a Strapi 4.0.0–5.36.1 sanitization bypass that turns API responses into a one-bit oracle; attackers extract an admin's reset token character by character, then take over the account.
blog · xbow.com
Grok 4.7 Is Different. So Is the Best Way to Use It.
XBOW tested Grok 4.7 on exploit crafting and agentic pentests: inside xAI's Build it improved substantially over 4.6, outside Build it slipped slightly—orchestration now matters as much as prompts.
blog · yeswehack.com
Why pentests cause security debt
New features ship, dependencies update, new APIs are added… and all the while, despite your pentest program, security debt mounts up.
blog · yeswehack.com
Pentests are dead. Long live pentests.
Traditional pentests have created a cottage industry of painful admin. So what needs to change?
blog · bugcrowd.com
Agentic vs human offensive security testing: Where AI actually earns its keep
Bugcrowd's CTO and offensive security lead break down where agentic security testing earns trust, where human judgment still wins, and how to roll it out without burning engineering's confidence.
blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
Back