Securitate web

509 topics in this forum

1. Awesome Web Security

   By Nytro, June 21, 2019
   • 3 replies
   • 15.3k views
   • 
   • n3Oh
   • May 27, 2021

2. Why ORMs and Prepared Statements Can't (Always) Win

   By Nytro, June 28
   • 0 replies
   • 1.2k views
   • 
   • Nytro
   • June 28

3. CS:GO: From Zero to 0-day

   By akkiliON, May 16
   • 1 reply
   • 1.7k views
   • 
   • Nytro
   • May 16

4. OSWE/AWAE Preparation

   By Nytro, September 16, 2020
   • 2 replies
   • 5.4k views
   • 
   • Nytro
   • April 30

5. How I Found A Vulnerability To Hack iCloud Accounts and How Apple Reacted To It

   By akkiliON, June 22, 2021
   • 4 replies
   • 7.4k views
   • 
   • n3Oh
   • April 27

6. Spring View Manipulation Vulnerability

   By Kev, September 6, 2020
   • 1 reply
   • 3.1k views
   • 
   • dietrichvida
   • April 27

7. Super FabriXss: From XSS to an RCE in Azure Service Fabric Explorer by Abusing an Event Tab Cluster Toggle (CVE-2023-23383)

   By akkiliON, April 23
   • 1 reply
   • 1.5k views
   • 
   • Nytro
   • April 24

8. Curteaveche.ro site spart?

   By WarLord, March 2
   • 2 replies
   • 3.1k views
   • 
   • UnixDevel
   • April 5

9. Razdon - Security Insights

   By Zatarra, January 4
   • 15 replies
   • 9.8k views
   • 
   • Zatarra
   • January 16

10. A Dive Into Web Application Authentication

    By Nytro, November 14, 2022
    • 0 replies
    • 2.7k views
    • 
    • Nytro
    • November 14, 2022

11. The complete GraphQL Security Guide

    By Nytro, November 14, 2022
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • November 14, 2022

12. TWO LINES OF JSCRIPT FOR $20,000 – PWN2OWN MIAMI 2022

    By akkiliON, October 18, 2022
    • 1 reply
    • 3.3k views
    • 
    • gigiRoman
    • October 20, 2022

13. Escalating SSTI to Reflected XSS using curly braces {}

    By Nytro, September 30, 2022
    • 0 replies
    • 2.3k views
    • 
    • Nytro
    • September 30, 2022

14. How to find and fix XML entity vulnerabilities

    By Nytro, September 30, 2022
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • September 30, 2022

15. 9200 - Pentesting Elasticsearch

    By err0r926, August 18, 2022
    • 8 replies
    • 3.9k views
    • 
    • err0r926
    • August 18, 2022

16. Cum sa protejez impotriva la carding

    By chas13, July 12, 2022
    • 4 replies
    • 3.9k views
    • 
    • chas13
    • July 14, 2022

17. MEGA: MALLEABLE ENCRYPTION GOES AWRY

    By akkiliON, June 22, 2022
    • 0 replies
    • 3.1k views
    • 
    • akkiliON
    • June 22, 2022

18. Exploiting remote code execution within VirusTotal platform in order to gain access to its various scans capabilities.

    By akkiliON, April 25, 2022
    • 0 replies
    • 3.2k views
    • 
    • akkiliON
    • April 25, 2022

19. Damn Vulnerable GraphQL Application

    By Nytro, March 20, 2022
    • 0 replies
    • 2.9k views
    • 
    • Nytro
    • March 20, 2022

20. From XSS to RCE (dompdf 0day)

    By Nytro, March 19, 2022
    • 1 reply
    • 2.8k views
    • 
    • Dragos
    • March 19, 2022

21. Websocket: common vulnerabilities plaguing it and managing them.

    By Nytro, December 21, 2021
    • 0 replies
    • 4.2k views
    • 
    • Nytro
    • December 21, 2021

22. Enumerating Files Using Server Side Request Forgery and the request Module

    By Nytro, December 21, 2021
    • 0 replies
    • 3k views
    • 
    • Nytro
    • December 21, 2021

23. A Detailed Guide on Log4J Penetration Testing

    By Nytro, December 21, 2021
    • 0 replies
    • 3.1k views
    • 
    • Nytro
    • December 21, 2021

24. The Subsequent Waves of log4j Vulnerabilities Aren’t as Bad as People Think

    By Nytro, December 21, 2021
    • 0 replies
    • 3k views
    • 
    • Nytro
    • December 21, 2021

25. A Complete Guide to Implementing SAML Authentication in Enterprise SaaS Applications

    By Nytro, November 26, 2021
    • 0 replies
    • 3.9k views
    • 
    • Nytro
    • November 26, 2021