Securitate web

511 topics in this forum

1. Bounty Tip: How to bypass authorization in SAML !

   By Nytro, April 15, 2020
   • 0 replies
   • 955 views
   • 
   • Nytro
   • April 15, 2020

2. Filtering the Crap, Content Security Policy (CSP) Reports

   By Nytro, April 15, 2020
   • 0 replies
   • 834 views
   • 
   • Nytro
   • April 15, 2020

3. Exploiting xdLocalStorage (localStorage and postMessage)

   By Nytro, April 15, 2020
   • 0 replies
   • 848 views
   • 
   • Nytro
   • April 15, 2020

4. HTTP Desync Attacks with Python and AWS

   By Nytro, March 22, 2020
   • 0 replies
   • 1.3k views
   • 
   • Nytro
   • March 22, 2020

5. Gaining AWS Console Access via API Keys

   By Nytro, March 22, 2020
   • 0 replies
   • 1.2k views
   • 
   • Nytro
   • March 22, 2020

6. XXE-scape through the front door

   By Nytro, March 22, 2020
   • 0 replies
   • 1.1k views
   • 
   • Nytro
   • March 22, 2020

7. Exploiting SSRFs

   By Nytro, February 25, 2020
   • 2 replies
   • 2.9k views
   • 
   • Nytro
   • February 25, 2020

8. HTTP Request Smuggling – 5 Practical Tips

   By Nytro, February 23, 2020
   • 0 replies
   • 1.2k views
   • 
   • Nytro
   • February 23, 2020

9. CSS data exfiltration in Firefox via a single injection point

   By Nytro, February 23, 2020
   • 0 replies
   • 1.1k views
   • 
   • Nytro
   • February 23, 2020

10. Top 10 web hacking techniques of 2019

    By Nytro, January 19, 2020
    • 0 replies
    • 1.6k views
    • 
    • Nytro
    • January 19, 2020

11. Hacking WebSocket

    By Nytro, November 30, 2019
    • 0 replies
    • 1.5k views
    • 
    • Nytro
    • November 30, 2019

12. Advanced Web Hacking by zdResearch

    By KhRadiya, November 25, 2019
    • 0 replies
    • 1.5k views
    • 
    • KhRadiya
    • November 25, 2019

13. Shielding applications from an untrusted cloud with Haven

    By Nytro, September 22, 2019
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • September 22, 2019

14. Microsoft Exchange – Privilege Escalation

    By Nytro, September 22, 2019
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • September 22, 2019

15. Server Side Template Injection – on the example of Pebble

    By Nytro, September 22, 2019
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • September 22, 2019

16. RCE with Flask Jinja Template Injection

    By Nytro, September 22, 2019
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • September 22, 2019

17. Patch Analysis: Examining a Missing Dot-Dot in Oracle WebLogic

    By Nytro, September 22, 2019
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • September 22, 2019

18. Explaining Server Side Template Injections

    By Nytro, September 22, 2019
    • 0 replies
    • 1.6k views
    • 
    • Nytro
    • September 22, 2019

19. Nonce-based CSP + Service Worker = CSP bypass?

    By Nytro, September 22, 2019
    • 0 replies
    • 1.4k views
    • 
    • Nytro
    • September 22, 2019

20. Security: HTTP Smuggling, Apache Traffic Server

    By Nytro, September 22, 2019
    • 0 replies
    • 1.2k views
    • 
    • Nytro
    • September 22, 2019

21. SELECT code_execution FROM * USING SQLite;

    By Nytro, August 18, 2019
    • 1 reply
    • 2.5k views
    • 
    • u0m3
    • August 19, 2019

22. Chaining Cache Poisoning To Stored XSS

    By u0m3, August 19, 2019
    • 0 replies
    • 1.9k views
    • 
    • u0m3
    • August 19, 2019

23. Bypassing IP Based Blocking with AWS API Gateway

    By u0m3, August 18, 2019
    • 0 replies
    • 1.7k views
    • 
    • u0m3
    • August 18, 2019

24. Apache Solr Injection Research

    By Nytro, August 18, 2019
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • August 18, 2019

25. Attacking SSL VPN - Part 2: Breaking the Fortigate SSL VPN

    By Nytro, August 18, 2019
    • 0 replies
    • 1.2k views
    • 
    • Nytro
    • August 18, 2019