SECURITY CIPHER · BLOG

Web Application Security

Posts from SecurityCipher.

PIYUSH KUMAWAT · June 30, 2026

Agentjacking: How Attackers Hijack AI Coding Agents Like Cursor and Claude

Agentjacking lets attackers hijack AI coding agents like Cursor, Claude Code and Codex via poisoned error data. Here's how it works and…

PIYUSH KUMAWAT · June 21, 2026

AutoJack: How One Web Page Can Hijack Your AI Agent and Own Your Machine

Microsoft's AutoJack shows how a single malicious web page can hijack an AI agent and run code on your machine. Here's how…

PIYUSH KUMAWAT · February 22, 2024

LLM Agents can Autonomously Hack Websites ?

Based on the research paper (https://arxiv.org/pdf/2402.06664.pdf), the study delves into the autonomous hacking capabilities of Large Language Models (LLMs), particularly focusing on…

PIYUSH KUMAWAT · January 3, 2024

Exploring Application Security with SAST, DAST, SCA, and IAST

Welcome to today’s blog, where we’ll explore the world of software security testing. In an era where cyber threats are on the…

PIYUSH KUMAWAT · August 14, 2023

Mastering WordPress Penetration Testing: A Step-by-Step Guide

In this comprehensive guide, we’ll explore various aspects of WordPress penetration testing. Starting with gathering information using tools like Wappalyzer and WPintel.…

PIYUSH KUMAWAT · August 12, 2023

Enhance WordPress Security: Comprehensive Guide

In this guide, we’ll unravel the crucial aspects of WordPress security, from user access management and update strategies to SSL implementation and…

PIYUSH KUMAWAT · March 11, 2023

Threat Modeling : Everything You Need to Know for Web Application Security

Web applications are a crucial part of today’s online landscape, with businesses relying on them to provide services to their customers. However,…

PIYUSH KUMAWAT · February 11, 2023

How to Conduct a Successful Penetration Test: A Step-by-Step Guide

Penetration testing is an essential component of a comprehensive cybersecurity strategy. It involves simulating an attack on an organization’s systems and applications…

PIYUSH KUMAWAT · January 30, 2023

OSV-Scanner: Protecting Your Open-Source Dependencies

In today’s digital age, cyber security threats are becoming increasingly prevalent and sophisticated. As a result, organizations need to have robust security…

PIYUSH KUMAWAT · January 23, 2023

Dastardly – Web Application Security Scanner – CI/CD

Introduction As a Security engineer, ensuring the security of your application is of the utmost importance. With the advent of Dastardly, a…