Securitate web

504 topics in this forum

1. Awesome Web Security

   By Nytro, June 21, 2019
   • 3 replies
   • 13.2k views
   • 
   • n3Oh
   • May 27, 2021

2. A Dive Into Web Application Authentication

   By Nytro, November 14
   • 0 replies
   • 905 views
   • 
   • Nytro
   • November 14

3. The complete GraphQL Security Guide

   By Nytro, November 14
   • 0 replies
   • 285 views
   • 
   • Nytro
   • November 14

4. TWO LINES OF JSCRIPT FOR $20,000 – PWN2OWN MIAMI 2022

   By akkiliON, October 18
   • 1 reply
   • 1.5k views
   • 
   • gigiRoman
   • October 20

5. Escalating SSTI to Reflected XSS using curly braces {}

   By Nytro, September 30
   • 0 replies
   • 890 views
   • 
   • Nytro
   • September 30

6. How to find and fix XML entity vulnerabilities

   By Nytro, September 30
   • 0 replies
   • 365 views
   • 
   • Nytro
   • September 30

7. 9200 - Pentesting Elasticsearch

   By err0r926, August 18
   • 8 replies
   • 2.3k views
   • 
   • err0r926
   • August 18

8. Cum sa protejez impotriva la carding

   By chas13, July 12
   • 4 replies
   • 2.3k views
   • 
   • chas13
   • July 14

9. MEGA: MALLEABLE ENCRYPTION GOES AWRY

   By akkiliON, June 22
   • 0 replies
   • 1.6k views
   • 
   • akkiliON
   • June 22

10. Exploiting remote code execution within VirusTotal platform in order to gain access to its various scans capabilities.

    By akkiliON, April 25
    • 0 replies
    • 1.8k views
    • 
    • akkiliON
    • April 25

11. Damn Vulnerable GraphQL Application

    By Nytro, March 20
    • 0 replies
    • 1.5k views
    • 
    • Nytro
    • March 20

12. From XSS to RCE (dompdf 0day)

    By Nytro, March 19
    • 1 reply
    • 1.4k views
    • 
    • Dragos
    • March 19

13. Websocket: common vulnerabilities plaguing it and managing them.

    By Nytro, December 21, 2021
    • 0 replies
    • 2.8k views
    • 
    • Nytro
    • December 21, 2021

14. Enumerating Files Using Server Side Request Forgery and the request Module

    By Nytro, December 21, 2021
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • December 21, 2021

15. A Detailed Guide on Log4J Penetration Testing

    By Nytro, December 21, 2021
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • December 21, 2021

16. The Subsequent Waves of log4j Vulnerabilities Aren’t as Bad as People Think

    By Nytro, December 21, 2021
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • December 21, 2021

17. A Complete Guide to Implementing SAML Authentication in Enterprise SaaS Applications

    By Nytro, November 26, 2021
    • 0 replies
    • 2.5k views
    • 
    • Nytro
    • November 26, 2021

18. How to Hack Apple ID

    By akkiliON, October 18, 2021
    • 0 replies
    • 3.6k views
    • 
    • akkiliON
    • October 18, 2021

19. How I Found A Vulnerability To Hack iCloud Accounts and How Apple Reacted To It

    By akkiliON, June 22, 2021
    • 2 replies
    • 5.1k views
    • 
    • infinito
    • September 6, 2021

20. A Python Regular Expression Bypass Technique

    By Nytro, July 26, 2021
    • 0 replies
    • 3.3k views
    • 
    • Nytro
    • July 26, 2021

21. alert() is dead, long live print()

    By Nytro, July 20, 2021
    • 0 replies
    • 3.1k views
    • 
    • Nytro
    • July 20, 2021

22. Remote code execution in cdnjs of Cloudflare

    By Nytro, July 20, 2021
    • 0 replies
    • 2.9k views
    • 
    • Nytro
    • July 20, 2021

23. Introducing DOM Invader: DOM XSS just got a whole lot easier to find

    By Nytro, June 30, 2021
    • 0 replies
    • 3.3k views
    • 
    • Nytro
    • June 30, 2021

24. CS 253 Web Security

    By Nytro, May 27, 2021
    • 0 replies
    • 3.4k views
    • 
    • Nytro
    • May 27, 2021

25. JavaScript prototype pollution: practice of finding and exploitation

    By Nytro, April 21, 2021
    • 0 replies
    • 3.5k views
    • 
    • Nytro
    • April 21, 2021