Question 1

What if I want to delete my account?

Accepted Answer

If you wish to delete your Beagle Security account, simply navigate to Profile through the Profile badge and then click on Delete account.

||| Keep note that account deletion is a permanent action and will result in the loss of all associated data, including test results, applications and test reports.

Question 2

How to set up automatic email forwarding for 2FA or magic link enabled login?

Accepted Answer

How to set up automatic email forwarding in Gmail web?

Log into your Gmail account
Click on the show search option from the search box at the top
Enter your search criteria i.e., enter the criteria for the emails you want to forward. This could include specific senders (from address), subjects, keywords, or any other relevant information.
Click on "Search" to see which emails match your search criteria. This step ensures that your search is working correctly and captures the emails you want to forward.
Click on the “Advanced search” button and then proceed to click on "Create filter”. Select the option "Forward it to" to set up automatic forwarding.
After choosing the forwarding option, enter the email address to which you want to forward the emails and proceed to click create filter.

How to set up automatic email forwarding in Outlook web?

Upon opening your Outlook web application, click on Settings >> Email > > Rules and then click on Add new rule.
For each rule you should enter a name, at least 1 condition and an action. They are as follows: Name Give your rule a descriptive name for easy identification and editing after setup. Condition You should specify the reason for forwarding your email, which is setting condition for your email forwarding. Here, you can set multiple conditions for a single rule. "From”: for forwarding emails from a specific email to anot

Question 3

What IPs do I need to whitelist in order for the tests to take place more effectively?

Accepted Answer

To ensure smooth and uninterrupted vulnerability testing, you need to whitelist specific IP addresses used by Beagle Security in your firewall and security systems before initiating a VAPT.

This allows our testing traffic to bypass restrictions such as rate limiting and IP blocking ensuring accurate vulnerability detection without disruptions.

To view the list of IPs to whitelist:

Go to the Applications tab in your Beagle Security dashboard.
Select the application you want to configure.
Look just below the search bar you'll find options like Tunneling, Discovery profile and IP Whitelisting.
Click on IP Whitelisting to view the list of IP addresses that need to be whitelisted.

Question 4

How to do file verification?

Accepted Answer

3 methods using file verification:

Manual file upload

Download the verification file Use the provided “Download file” button to save the file to your local system.
Upload the file to your website’s root directory Place the file at the path shown on the screen (e.g., https://yourdomain.com/_.txt).
Verify accessibility Beagle Security will check if the file is accessible from the given URL. You can test this by visiting the link directly in your browser.
Click “Verify domain” Once the file is placed correctly, click the Verify domain button to complete the process. Once your domain is verified, you’ll be directed to the Beagle Security dashboard, where you can configure your test settings and start your first application security test.

Using command line

Copy command Copy the command provided in the directions in the side panel
Open terminal Open the command line on your Linux server and paste the string there (Note: You need superuser permission)
Execute command Execute the command to have the file generated in the root of your website directory
Verify domain Click on the Verify domain button to complete the domain verification process

Using WGET

Copy command Copy the command provided in the directions in the side panel.2
Open terminal Open the command line on your Linux server and paste the string there (Note: You need superuser permission)

Question 5

Where to find access token and application token?

Accepted Answer

Access tokens and application tokens in Beagle Security are used to authenticate and automate tasks through API integrations.

Access token: This token is linked to your user profile and is used for authenticating API requests across your account. It enables secure integration with external tools, CI/CD pipelines or custom scripts that interact with Beagle Security’s platform.
Application token: This token is specific to each application you’ve added in Beagle Security. It allows you to trigger tests and retrieve results programmatically for that particular application.

To create an access token:

Navigate to your Profile
Click on Personal Access Token
Click “New Personal Access Token” and provide a name and expiry date
Select the required permission scopes by toggling them on as needed
Click Create to generate the token
A popup titled “New Access Token” will appear on the screen, copy the token immediately, as it will only be shown once. Store it securely for future use

To generate an application token:

Go to the Applications section in your dashboard.
Select the specific application for which you want to generate a token
Click the three dots (⋮) next to the application name to view its details
In the application details view, click on the "Get Token" button (displayed with a key icon) under the Application Token label
Copy the token and store it securely for future use

Question 6

Out of Band vulnerability detection on Beagle Security

Accepted Answer

What is an Out-of-Band (OOB) vulnerability?

Out-of-Band vulnerabilities are vulnerabilities that cannot be found in a traditional penetration testing methodology (HTTP request-response). Mostly found in web applications, APIs, and backend programs, this vulnerability has a distinct working process.

How does a hacker exploit an Out-of-Band vulnerability?

A payload is crafted to send a specific request to the bad actor’s machine.
It is then uploaded to the target service/application.

What makes OOB vulnerability distinct from all other vulnerabilities is that often the vulnerable service/application is required to generate an outbound TCP/UDP/ICMP request (HTTP request-response is behind other vulnerabilities) which allows the attacker to exploit the vulnerable service.Also, OOB vulnerability remains intact till the vulnerable service is triggered by the user or another service, and it may happen either immediately or after certain days. It can even happen when another service is triggered, present within the application itself, or even from a completely different web application.

Once the vulnerability is triggered when interaction happens in the vulnerable service/application, the TCP/UDP/ICMP request is sent to the attacker machine with which the hacker can then execute arbitrary codes in accordance with the vulnerability present in it. Commonly found Out-of-Band vulnerabilities:

Server-Side Request Forgery (SSRF)

Out of Band XML External Enti

Frequently Read Articles

Browse All Categories