Securitate web

512 topics in this forum

1. THE MOST FORGOTTEN WEB VULNERABILITIES

   By Nytro, February 11, 2016
   • 0 replies
   • 988 views
   • 
   • Nytro
   • February 11, 2016

2. Serialization Must Die: Act 1: Kryo

   By Nytro, February 16, 2016
   • 0 replies
   • 987 views
   • 
   • Nytro
   • February 16, 2016

3. EL 3.0/Lambda Injection: Hacker Friendly Java

   By Nytro, December 18, 2014
   • 0 replies
   • 983 views
   • 
   • Nytro
   • December 18, 2014

4. Defending Against Web Attacks: X-Frame Options

   By Aerosol, May 7, 2015   

   • application
   • headers
   • (and 3 more)

     Tagged with:

     • application
     • headers
     • server
     • shown
     • x-frame-options
   • 0 replies
   • 981 views
   • 
   • Aerosol
   • May 7, 2015

5. Postcards from the post-XSS world

   By Nytro, February 2, 2015
   • 0 replies
   • 981 views
   • 
   • Nytro
   • February 2, 2015

6. Reflected File Download - A New Web Attack Vector

   By Nytro, November 6, 2014
   • 0 replies
   • 981 views
   • 
   • Nytro
   • November 6, 2014

7. Critical vulnerabilities in JSON Web Token libraries

   By Nytro, February 3, 2019
   • 0 replies
   • 979 views
   • 
   • Nytro
   • February 3, 2019

8. GitS 2015: knockers.py (hash extension vulnerability)

   By Fi8sVrs, May 1, 2015   

   • allowing
   • host
   • (and 3 more)

     Tagged with:

     • allowing
     • host
     • port
     • python
     • token
   • 0 replies
   • 979 views
   • 
   • Fi8sVrs
   • May 1, 2015

9. MentalJS DOM bypass

   By Aerosol, March 10, 2015   

   • configurabletrue
   • getfunctionreturn
   • (and 3 more)

     Tagged with:

     • configurabletrue
     • getfunctionreturn
     • null
     • script
     • writablefalse
   • 0 replies
   • 976 views
   • 
   • Aerosol
   • March 10, 2015

10. Analysis of setting cookies for third party websites in different browsers

    By Nytro, January 21, 2015
    • 0 replies
    • 975 views
    • 
    • Nytro
    • January 21, 2015

11. Bounty Tip: How to bypass authorization in SAML !

    By Nytro, April 15, 2020
    • 0 replies
    • 972 views
    • 
    • Nytro
    • April 15, 2020

12. Website Hacking 101

    By Aerosol, December 10, 2014
    • 0 replies
    • 970 views
    • 
    • Aerosol
    • December 10, 2014

13. SPL ArrayObject/SPLObjectStorage Unserialization Type Confusion Vulnerabilities

    By Nytro, August 27, 2014
    • 0 replies
    • 968 views
    • 
    • Nytro
    • August 27, 2014

14. Defending Against Web Attacks: X-XSS Protection

    By Aerosol, May 7, 2015   

    • gmt
    • header
    • (and 3 more)

      Tagged with:

      • gmt
      • header
      • headers
      • no-cache
      • script
    • 0 replies
    • 968 views
    • 
    • Aerosol
    • May 7, 2015

15. Timing Attacks in Web Applications

    By Nytro, November 21, 2014
    • 1 reply
    • 967 views
    • 
    • Ganav
    • November 21, 2014

16. Your Nodejs authentication tutorial is wrong

    By osirium, August 4, 2017
    • 0 replies
    • 966 views
    • 
    • osirium
    • August 4, 2017

17. Website Backdoors Leverage the Pastebin Service

    By Nytro, January 7, 2015
    • 0 replies
    • 958 views
    • 
    • Nytro
    • January 7, 2015

18. Clean up Your WordPress Site after Hack and Secure it against Future Threats

    By Aerosol, February 21, 2015   

    • hacking
    • security
    • (and 3 more)

      Tagged with:

      • hacking
      • security
      • site
      • website
      • wordpress
    • 0 replies
    • 958 views
    • 
    • Aerosol
    • February 21, 2015

19. Cross-Origin CSS Attacks Revisited (feat. UTF-16)

    By Nytro, February 10, 2016
    • 0 replies
    • 954 views
    • 
    • Nytro
    • February 10, 2016

20. CryptoPHP - Analysis Of A Hidden Threat Inside Popular Content Management Systems

    By Aerosol, January 22, 2015   

    • command
    • communication
    • (and 3 more)

      Tagged with:

      • command
      • communication
      • control
      • servers
      • version
    • 0 replies
    • 953 views
    • 
    • Aerosol
    • January 22, 2015

21. Adapting Burp Extensions for Tailored Pentesting

    By Nytro, August 23, 2017
    • 0 replies
    • 944 views
    • 
    • Nytro
    • August 23, 2017

22. HTML5 Security: Local Storage

    By Aerosol, May 7, 2015   

    • application
    • data
    • (and 3 more)

      Tagged with:

      • application
      • data
      • local
      • origin
      • storage
    • 0 replies
    • 943 views
    • 
    • Aerosol
    • May 7, 2015

23. What is Two-Factor Authentication? Where Should You Use It?

    By Nytro, November 25, 2014
    • 0 replies
    • 941 views
    • 
    • Nytro
    • November 25, 2014

24. Avoiding XSS in React is Still Hard

    By Nytro, April 22, 2018
    • 0 replies
    • 941 views
    • 
    • Nytro
    • April 22, 2018

25. Make Redirection Evil Again:URLParser Issues in OAuth

    By Nytro, April 24, 2019
    • 0 replies
    • 941 views
    • 
    • Nytro
    • April 24, 2019