Securitate web

523 topics in this forum

1. Blind SSRF chains

   By Nytro, January 25, 2021
   • 0 replies
   • 4.9k views
   • 
   • Nytro
   • January 25, 2021

2. Cache poisoning in popular open source packages

   By Nytro, January 25, 2021
   • 0 replies
   • 4.2k views
   • 
   • Nytro
   • January 25, 2021

3. Pentest applications with GraphQL

   By Nytro, January 25, 2021
   • 0 replies
   • 4.1k views
   • 
   • Nytro
   • January 25, 2021

4. Avast Would not update virus defination

   By Loverwin, January 19, 2021
   • 6 replies
   • 5.5k views
   • 
   • biosh3ll
   • January 20, 2021

5. From SVG and back, yet another mutation XSS via namespace confusion for DOMPurify < 2.2.2 bypass

   By akkiliON, December 23, 2020
   • 0 replies
   • 4.1k views
   • 
   • akkiliON
   • December 23, 2020

6. How To Bypass CSP By Hiding JavaScript In A PNG Image

   By akkiliON, December 17, 2020
   • 2 replies
   • 4.8k views
   • 
   • akkiliON
   • December 18, 2020

7. XS-Leaks Wiki

   By Nytro, December 6, 2020
   • 0 replies
   • 3.8k views
   • 
   • Nytro
   • December 6, 2020

8. ImageMagick - Shell injection via PDF password

   By Nytro, November 29, 2020
   • 0 replies
   • 3.7k views
   • 
   • Nytro
   • November 29, 2020

9. Common Federated Identity Protocols: OpenID Connect vs OAuth vs SAML 2

   By Nytro, November 29, 2020
   • 0 replies
   • 3.6k views
   • 
   • Nytro
   • November 29, 2020

10. POSTGRESQL EXTENSION SHELLCODE EXECUTION

    By Nytro, November 29, 2020
    • 0 replies
    • 3.5k views
    • 
    • Nytro
    • November 29, 2020

11. Advanced MSSQL Injection Tricks

    By Nytro, November 15, 2020
    • 1 reply
    • 4.1k views
    • 
    • RuthParke
    • November 18, 2020

12. Smuggling an (Un)exploitable XSS

    By Nytro, November 15, 2020
    • 0 replies
    • 3.3k views
    • 
    • Nytro
    • November 15, 2020

13. Unique XXE to AWS Keys journey

    By Nytro, November 15, 2020
    • 0 replies
    • 3.1k views
    • 
    • Nytro
    • November 15, 2020

14. DIVING INTO A WEBSOCKET VULNERABILITY IN APACHE TOMCAT

    By Nytro, November 6, 2020
    • 0 replies
    • 3.3k views
    • 
    • Nytro
    • November 6, 2020

15. Chat cu mesaje criptate?

    By Che, October 26, 2020
    • 18 replies
    • 6.8k views
    • 
    • yoyois
    • November 1, 2020

16. OSWE/AWAE Preparation

    By Nytro, October 31, 2020
    • 0 replies
    • 4k views
    • 
    • Nytro
    • October 31, 2020

17. Advanced boolean-based SQLi filter bypass techniques

    By Nytro, September 14, 2020
    • 2 replies
    • 3.9k views
    • 
    • Nytro
    • September 15, 2020

18. How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM

    By Nytro, September 14, 2020
    • 2 replies
    • 5k views
    • 
    • Nytro
    • September 14, 2020

19. Vulnerabilities in the Openfire Admin Console

    By Kev, August 6, 2020   

    • cve-2019-18394
    • cve-2019-18393
    • 0 replies
    • 2.7k views
    • 
    • Kev
    • August 6, 2020

20. Towards native security defenses for the web ecosystem

    By Nytro, July 30, 2020
    • 0 replies
    • 2.4k views
    • 
    • Nytro
    • July 30, 2020

21. Sometimes they come back: exfiltration through MySQL and CVE-2020-11579

    By Nytro, July 30, 2020
    • 0 replies
    • 2.1k views
    • 
    • Nytro
    • July 30, 2020

22. Real-world JS 1

    By Nytro, July 30, 2020
    • 0 replies
    • 2.2k views
    • 
    • Nytro
    • July 30, 2020

23. Researchers exploit HTTP/2, WPA3 protocols to stage highly efficient ‘timeless timing’ attacks

    By Nytro, July 30, 2020
    • 0 replies
    • 1.9k views
    • 
    • Nytro
    • July 30, 2020

24. Attacking MS Exchange Web Interfaces

    By Nytro, July 30, 2020
    • 0 replies
    • 2.4k views
    • 
    • Nytro
    • July 30, 2020

25. SharePoint and Pwn :: Remote Code Execution Against SharePoint Server Abusing DataSet

    By Nytro, July 30, 2020
    • 0 replies
    • 1.9k views
    • 
    • Nytro
    • July 30, 2020