Securitate web

511 topics in this forum

1. Awesome Web Security

   By Nytro, June 21, 2019
   • 3 replies
   • 16.9k views
   • 
   • n3Oh
   • May 27, 2021

2. Testare vulnerabilitati SaaS

   By genius22, April 8
   • 1 reply
   • 947 views
   • 
   • Zatarra
   • April 10

3. Bine v-am gasit, xampp server apache

   By fskadi, February 25
   • 2 replies
   • 2.1k views
   • 
   • Massaro
   • February 28

4. Why ORMs and Prepared Statements Can't (Always) Win

   By Nytro, June 28, 2023
   • 0 replies
   • 4.3k views
   • 
   • Nytro
   • June 28, 2023

5. CS:GO: From Zero to 0-day

   By akkiliON, May 16, 2023
   • 1 reply
   • 2.6k views
   • 
   • Nytro
   • May 16, 2023

6. OSWE/AWAE Preparation

   By Nytro, September 16, 2020
   • 2 replies
   • 6.8k views
   • 
   • Nytro
   • April 30, 2023

7. How I Found A Vulnerability To Hack iCloud Accounts and How Apple Reacted To It

   By akkiliON, June 22, 2021
   • 4 replies
   • 9k views
   • 
   • n3Oh
   • April 27, 2023

8. Spring View Manipulation Vulnerability

   By Kev, September 6, 2020
   • 1 reply
   • 4.1k views
   • 
   • dietrichvida
   • April 27, 2023

9. Super FabriXss: From XSS to an RCE in Azure Service Fabric Explorer by Abusing an Event Tab Cluster Toggle (CVE-2023-23383)

   By akkiliON, April 23, 2023
   • 1 reply
   • 2.5k views
   • 
   • Nytro
   • April 24, 2023

10. Curteaveche.ro site spart?

    By WarLord, March 2, 2023
    • 2 replies
    • 4.2k views
    • 
    • UnixDevel
    • April 5, 2023

11. Razdon - Security Insights

    By Zatarra, January 4, 2023
    • 15 replies
    • 11.2k views
    • 
    • Zatarra
    • January 16, 2023

12. A Dive Into Web Application Authentication

    By Nytro, November 14, 2022
    • 0 replies
    • 3.7k views
    • 
    • Nytro
    • November 14, 2022

13. The complete GraphQL Security Guide

    By Nytro, November 14, 2022
    • 0 replies
    • 2.8k views
    • 
    • Nytro
    • November 14, 2022

14. TWO LINES OF JSCRIPT FOR $20,000 – PWN2OWN MIAMI 2022

    By akkiliON, October 18, 2022
    • 1 reply
    • 4.4k views
    • 
    • gigiRoman
    • October 20, 2022

15. Escalating SSTI to Reflected XSS using curly braces {}

    By Nytro, September 30, 2022
    • 0 replies
    • 3.3k views
    • 
    • Nytro
    • September 30, 2022

16. How to find and fix XML entity vulnerabilities

    By Nytro, September 30, 2022
    • 0 replies
    • 2.7k views
    • 
    • Nytro
    • September 30, 2022

17. 9200 - Pentesting Elasticsearch

    By err0r926, August 18, 2022
    • 8 replies
    • 5.2k views
    • 
    • err0r926
    • August 18, 2022

18. Cum sa protejez impotriva la carding

    By chas13, July 12, 2022
    • 4 replies
    • 5.1k views
    • 
    • chas13
    • July 14, 2022

19. MEGA: MALLEABLE ENCRYPTION GOES AWRY

    By akkiliON, June 22, 2022
    • 0 replies
    • 4.2k views
    • 
    • akkiliON
    • June 22, 2022

20. Exploiting remote code execution within VirusTotal platform in order to gain access to its various scans capabilities.

    By akkiliON, April 25, 2022
    • 0 replies
    • 4.3k views
    • 
    • akkiliON
    • April 25, 2022

21. Damn Vulnerable GraphQL Application

    By Nytro, March 20, 2022
    • 0 replies
    • 4.1k views
    • 
    • Nytro
    • March 20, 2022

22. From XSS to RCE (dompdf 0day)

    By Nytro, March 19, 2022
    • 1 reply
    • 3.8k views
    • 
    • Dragos
    • March 19, 2022

23. Websocket: common vulnerabilities plaguing it and managing them.

    By Nytro, December 21, 2021
    • 0 replies
    • 5.3k views
    • 
    • Nytro
    • December 21, 2021

24. Enumerating Files Using Server Side Request Forgery and the request Module

    By Nytro, December 21, 2021
    • 0 replies
    • 4.1k views
    • 
    • Nytro
    • December 21, 2021

25. A Detailed Guide on Log4J Penetration Testing

    By Nytro, December 21, 2021
    • 0 replies
    • 4.2k views
    • 
    • Nytro
    • December 21, 2021