Securitate web

466 topics in this forum

1. Awesome Web Security

   By Nytro, June 21, 2019
   • 1 reply
   • 5k views
   • 
   • Trash
   • April 14

2. Chat cu mesaje criptate?

   By Che, Monday at 01:42 PM
   • 15 replies
   • 876 views
   • 
   • Nytro
   • 17 hours ago

3. OSWE/AWAE Preparation

   By Nytro, September 16
   • 0 replies
   • 813 views
   • 
   • Nytro
   • September 16

4. Advanced boolean-based SQLi filter bypass techniques

   By Nytro, September 14
   • 2 replies
   • 985 views
   • 
   • Nytro
   • September 15

5. How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM

   By Nytro, September 14
   • 2 replies
   • 1.3k views
   • 
   • Nytro
   • September 14

6. Spring View Manipulation Vulnerability

   By Kev, September 6
   • 0 replies
   • 640 views
   • 
   • Kev
   • September 6

7. Vulnerabilities in the Openfire Admin Console

   By Kev, August 6   

   • cve-2019-18394
   • cve-2019-18393
   • 0 replies
   • 558 views
   • 
   • Kev
   • August 6

8. Towards native security defenses for the web ecosystem

   By Nytro, July 30
   • 0 replies
   • 539 views
   • 
   • Nytro
   • July 30

9. Sometimes they come back: exfiltration through MySQL and CVE-2020-11579

   By Nytro, July 30
   • 0 replies
   • 541 views
   • 
   • Nytro
   • July 30

10. Real-world JS 1

    By Nytro, July 30
    • 0 replies
    • 503 views
    • 
    • Nytro
    • July 30

11. Researchers exploit HTTP/2, WPA3 protocols to stage highly efficient ‘timeless timing’ attacks

    By Nytro, July 30
    • 0 replies
    • 388 views
    • 
    • Nytro
    • July 30

12. Attacking MS Exchange Web Interfaces

    By Nytro, July 30
    • 0 replies
    • 362 views
    • 
    • Nytro
    • July 30

13. SharePoint and Pwn :: Remote Code Execution Against SharePoint Server Abusing DataSet

    By Nytro, July 30
    • 0 replies
    • 340 views
    • 
    • Nytro
    • July 30

14. Piercing the Veal: Short Stories to Read with Friends (SSRF)

    By Nytro, May 9
    • 0 replies
    • 668 views
    • 
    • Nytro
    • May 9

15. Closing the Loop: Practical Attacks and Defences for GraphQL APIs

    By Nytro, May 9
    • 0 replies
    • 637 views
    • 
    • Nytro
    • May 9

16. SQL INJECTION AND POSTGRES - AN ADVENTURE TO EVENTUAL RCE

    By Nytro, May 9
    • 0 replies
    • 413 views
    • 
    • Nytro
    • May 9

17. XSS fun with animated SVG

    By Nytro, April 15
    • 0 replies
    • 405 views
    • 
    • Nytro
    • April 15

18. New Stealth Magecart Attack Bypasses Payment Services Using Iframes

    By Nytro, April 15
    • 0 replies
    • 428 views
    • 
    • Nytro
    • April 15

19. Hacking The Web With Unicode

    By Nytro, April 15
    • 0 replies
    • 392 views
    • 
    • Nytro
    • April 15

20. Breaking and Pwning Apps and Servers on AWS and Azure

    By Nytro, April 15
    • 0 replies
    • 376 views
    • 
    • Nytro
    • April 15

21. Bypassing modern XSS mitigations with code-reuse attacks

    By Nytro, April 15
    • 0 replies
    • 378 views
    • 
    • Nytro
    • April 15

22. HTTP Desync Attacks: Request Smuggling Reborn

    By Nytro, April 15
    • 0 replies
    • 363 views
    • 
    • Nytro
    • April 15

23. Hunter of Default Logins (Web/HTTP)

    By Nytro, April 15
    • 0 replies
    • 289 views
    • 
    • Nytro
    • April 15

24. Same Same But Different: Discovering SQL Injections Incrementally with Isomorphic SQL Statements

    By Nytro, April 15
    • 0 replies
    • 287 views
    • 
    • Nytro
    • April 15

25. XML External Entity (XXE) Attacks and How to Avoid Them

    By Nytro, April 15
    • 0 replies
    • 284 views
    • 
    • Nytro
    • April 15