Securitate web

511 topics in this forum

1. Browser-Based Vulnerabilities in Web Applications

   By Aerosol, April 3, 2015   

   • browser
   • page
   • (and 3 more)

     Tagged with:

     • browser
     • page
     • password
     • request
     • user
   • 0 replies
   • 2.2k views
   • 
   • Aerosol
   • April 3, 2015

2. Bypassing Same Origin Policy (SOP)

   By Aerosol, April 3, 2015   

   • access
   • browser
   • (and 3 more)

     Tagged with:

     • access
     • browser
     • origin
     • policy
     • sop
   • 0 replies
   • 986 views
   • 
   • Aerosol
   • April 3, 2015

3. XML External Entity attack (XXE) in a Nutshell

   By Nytro, April 3, 2015
   • 0 replies
   • 817 views
   • 
   • Nytro
   • April 3, 2015

4. Retrieving all tables and their columns at once MSSQL

   By Nytro, April 3, 2015
   • 2 replies
   • 1.6k views
   • 
   • Nytro
   • April 3, 2015

5. New error-based SQL Injection vectors in MySQL >= 5.7.5

   By Nytro, April 3, 2015
   • 0 replies
   • 1.2k views
   • 
   • Nytro
   • April 3, 2015

6. Fast exploitation method of SQL Injection in IBM DB2

   By Nytro, April 3, 2015
   • 0 replies
   • 827 views
   • 
   • Nytro
   • April 3, 2015

7. OS Command Execution in PostgreSQL >= 9.3

   By Nytro, April 3, 2015
   • 0 replies
   • 1.3k views
   • 
   • Nytro
   • April 3, 2015

8. Error-based SQL Injection vectors in Oracle using dbms_spm.* functions

   By Nytro, April 3, 2015
   • 0 replies
   • 859 views
   • 
   • Nytro
   • April 3, 2015

9. SQL Inception: How to select yourself

   By Nytro, April 2, 2015
   • 0 replies
   • 999 views
   • 
   • Nytro
   • April 2, 2015

10. Exploiting CVE-2011-2461 on google.com

    By Nytro, March 30, 2015
    • 0 replies
    • 987 views
    • 
    • Nytro
    • March 30, 2015

11. XPATH Assisted XXE Attacks

    By Nytro, March 20, 2015
    • 0 replies
    • 875 views
    • 
    • Nytro
    • March 20, 2015

12. Understanding Web Caching

    By Aerosol, March 12, 2015   

    • browser
    • cache
    • (and 3 more)

      Tagged with:

      • browser
      • cache
      • caching
      • internet
      • web
    • 0 replies
    • 934 views
    • 
    • Aerosol
    • March 12, 2015

13. Cross-Site Scripting [XSS]

    By Guest Kronzy, March 11, 2015
    • 1 reply
    • 1.4k views
    • 
    • metasploit2015
    • March 11, 2015

14. MentalJS DOM bypass

    By Aerosol, March 10, 2015   

    • configurabletrue
    • getfunctionreturn
    • (and 3 more)

      Tagged with:

      • configurabletrue
      • getfunctionreturn
      • null
      • script
      • writablefalse
    • 0 replies
    • 973 views
    • 
    • Aerosol
    • March 10, 2015

15. HTML5 Security: Cross Domain Messaging

    By Aerosol, March 10, 2015   

    • code
    • html5
    • (and 3 more)

      Tagged with:

      • code
      • html5
      • message
      • receiving
      • window
    • 0 replies
    • 1k views
    • 
    • Aerosol
    • March 10, 2015

16. OWASP ProActive Controls: Part 2 of 2

    By Aerosol, March 8, 2015   

    • application
    • data
    • (and 3 more)

      Tagged with:

      • application
      • data
      • encryption
      • security
      • user
    • 0 replies
    • 1k views
    • 
    • Aerosol
    • March 8, 2015

17. OWASP ProActive Controls: Part 1

    By Aerosol, March 8, 2015   

    • access
    • application
    • (and 3 more)

      Tagged with:

      • access
      • application
      • data
      • input
      • user
    • 0 replies
    • 1.1k views
    • 
    • Aerosol
    • March 8, 2015

18. XSS Auditor bypass

    By Aerosol, February 19, 2015   

    • block
    • html
    • (and 3 more)

      Tagged with:

      • block
      • html
      • script
      • vector
      • xss
    • 1 reply
    • 1.3k views
    • 
    • Aerosol
    • March 1, 2015

19. OWASP ZAP Reconnaissance – Without Permission!

    By Aerosol, March 1, 2015   

    • certificate
    • information
    • (and 3 more)

      Tagged with:

      • certificate
      • information
      • site
      • web
      • zap
    • 0 replies
    • 1.4k views
    • 
    • Aerosol
    • March 1, 2015

20. Clean up Your WordPress Site after Hack and Secure it against Future Threats

    By Aerosol, February 21, 2015   

    • hacking
    • security
    • (and 3 more)

      Tagged with:

      • hacking
      • security
      • site
      • website
      • wordpress
    • 0 replies
    • 955 views
    • 
    • Aerosol
    • February 21, 2015

21. Exploiting Xxe With Out of Band Channels

    By Nytro, February 20, 2015
    • 0 replies
    • 808 views
    • 
    • Nytro
    • February 20, 2015

22. Reflected File Download A New Web Attack Vector

    By Aerosol, February 18, 2015   

    • attack
    • file
    • (and 3 more)

      Tagged with:

      • attack
      • file
      • reflected
      • vector
      • web
    • 0 replies
    • 847 views
    • 
    • Aerosol
    • February 18, 2015

23. Automating Removal of Java Obfuscation

    By Nytro, February 18, 2015
    • 0 replies
    • 897 views
    • 
    • Nytro
    • February 18, 2015

24. HTTP/2 Frequently Asked Questions

    By Nytro, February 18, 2015
    • 0 replies
    • 824 views
    • 
    • Nytro
    • February 18, 2015

25. Analysis of the Fancybox-For-WordPress Vulnerability

    By Nytro, February 17, 2015
    • 0 replies
    • 851 views
    • 
    • Nytro
    • February 17, 2015