Securitate web

524 topics in this forum

1. ?Pluralsight 1 Year Premium (Free)?

   By mrreboot, December 29, 2020
   • 2 replies
   • 5.9k views
   • 
   • Nytro
   • February 3, 2021

2. Blind SSRF chains

   By Nytro, January 25, 2021
   • 0 replies
   • 5.1k views
   • 
   • Nytro
   • January 25, 2021

3. Cache poisoning in popular open source packages

   By Nytro, January 25, 2021
   • 0 replies
   • 4.4k views
   • 
   • Nytro
   • January 25, 2021

4. Pentest applications with GraphQL

   By Nytro, January 25, 2021
   • 0 replies
   • 4.3k views
   • 
   • Nytro
   • January 25, 2021

5. Avast Would not update virus defination

   By Loverwin, January 19, 2021
   • 6 replies
   • 5.9k views
   • 
   • biosh3ll
   • January 20, 2021

6. From SVG and back, yet another mutation XSS via namespace confusion for DOMPurify < 2.2.2 bypass

   By akkiliON, December 23, 2020
   • 0 replies
   • 4.3k views
   • 
   • akkiliON
   • December 23, 2020

7. How To Bypass CSP By Hiding JavaScript In A PNG Image

   By akkiliON, December 17, 2020
   • 2 replies
   • 5.1k views
   • 
   • akkiliON
   • December 18, 2020

8. XS-Leaks Wiki

   By Nytro, December 6, 2020
   • 0 replies
   • 4k views
   • 
   • Nytro
   • December 6, 2020

9. ImageMagick - Shell injection via PDF password

   By Nytro, November 29, 2020
   • 0 replies
   • 4k views
   • 
   • Nytro
   • November 29, 2020

10. Common Federated Identity Protocols: OpenID Connect vs OAuth vs SAML 2

    By Nytro, November 29, 2020
    • 0 replies
    • 3.9k views
    • 
    • Nytro
    • November 29, 2020

11. POSTGRESQL EXTENSION SHELLCODE EXECUTION

    By Nytro, November 29, 2020
    • 0 replies
    • 3.7k views
    • 
    • Nytro
    • November 29, 2020

12. Advanced MSSQL Injection Tricks

    By Nytro, November 15, 2020
    • 1 reply
    • 4.4k views
    • 
    • RuthParke
    • November 18, 2020

13. Smuggling an (Un)exploitable XSS

    By Nytro, November 15, 2020
    • 0 replies
    • 3.5k views
    • 
    • Nytro
    • November 15, 2020

14. Unique XXE to AWS Keys journey

    By Nytro, November 15, 2020
    • 0 replies
    • 3.3k views
    • 
    • Nytro
    • November 15, 2020

15. DIVING INTO A WEBSOCKET VULNERABILITY IN APACHE TOMCAT

    By Nytro, November 6, 2020
    • 0 replies
    • 3.6k views
    • 
    • Nytro
    • November 6, 2020

16. Chat cu mesaje criptate?

    By Che, October 26, 2020
    • 18 replies
    • 7.5k views
    • 
    • yoyois
    • November 1, 2020

17. OSWE/AWAE Preparation

    By Nytro, October 31, 2020
    • 0 replies
    • 4.4k views
    • 
    • Nytro
    • October 31, 2020

18. Advanced boolean-based SQLi filter bypass techniques

    By Nytro, September 14, 2020
    • 2 replies
    • 4.2k views
    • 
    • Nytro
    • September 15, 2020

19. How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM

    By Nytro, September 14, 2020
    • 2 replies
    • 5.4k views
    • 
    • Nytro
    • September 14, 2020

20. Vulnerabilities in the Openfire Admin Console

    By Kev, August 6, 2020   

    • cve-2019-18394
    • cve-2019-18393
    • 0 replies
    • 2.9k views
    • 
    • Kev
    • August 6, 2020

21. Towards native security defenses for the web ecosystem

    By Nytro, July 30, 2020
    • 0 replies
    • 2.6k views
    • 
    • Nytro
    • July 30, 2020

22. Sometimes they come back: exfiltration through MySQL and CVE-2020-11579

    By Nytro, July 30, 2020
    • 0 replies
    • 2.3k views
    • 
    • Nytro
    • July 30, 2020

23. Real-world JS 1

    By Nytro, July 30, 2020
    • 0 replies
    • 2.8k views
    • 
    • Nytro
    • July 30, 2020

24. Researchers exploit HTTP/2, WPA3 protocols to stage highly efficient ‘timeless timing’ attacks

    By Nytro, July 30, 2020
    • 0 replies
    • 2.1k views
    • 
    • Nytro
    • July 30, 2020

25. Attacking MS Exchange Web Interfaces

    By Nytro, July 30, 2020
    • 0 replies
    • 2.7k views
    • 
    • Nytro
    • July 30, 2020