Securitate web

524 topics in this forum

1. SharePoint and Pwn :: Remote Code Execution Against SharePoint Server Abusing DataSet

   By Nytro, July 30, 2020
   • 0 replies
   • 2.1k views
   • 
   • Nytro
   • July 30, 2020

2. Piercing the Veal: Short Stories to Read with Friends (SSRF)

   By Nytro, May 9, 2020
   • 0 replies
   • 2.5k views
   • 
   • Nytro
   • May 9, 2020

3. Closing the Loop: Practical Attacks and Defences for GraphQL APIs

   By Nytro, May 9, 2020
   • 0 replies
   • 2.5k views
   • 
   • Nytro
   • May 9, 2020

4. SQL INJECTION AND POSTGRES - AN ADVENTURE TO EVENTUAL RCE

   By Nytro, May 9, 2020
   • 0 replies
   • 2k views
   • 
   • Nytro
   • May 9, 2020

5. XSS fun with animated SVG

   By Nytro, April 15, 2020
   • 0 replies
   • 1.9k views
   • 
   • Nytro
   • April 15, 2020

6. New Stealth Magecart Attack Bypasses Payment Services Using Iframes

   By Nytro, April 15, 2020
   • 0 replies
   • 2.2k views
   • 
   • Nytro
   • April 15, 2020

7. Hacking The Web With Unicode

   By Nytro, April 15, 2020
   • 0 replies
   • 2.1k views
   • 
   • Nytro
   • April 15, 2020

8. Breaking and Pwning Apps and Servers on AWS and Azure

   By Nytro, April 15, 2020
   • 0 replies
   • 2.2k views
   • 
   • Nytro
   • April 15, 2020

9. Bypassing modern XSS mitigations with code-reuse attacks

   By Nytro, April 15, 2020
   • 0 replies
   • 2.1k views
   • 
   • Nytro
   • April 15, 2020

10. HTTP Desync Attacks: Request Smuggling Reborn

    By Nytro, April 15, 2020
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • April 15, 2020

11. Hunter of Default Logins (Web/HTTP)

    By Nytro, April 15, 2020
    • 0 replies
    • 2.1k views
    • 
    • Nytro
    • April 15, 2020

12. Same Same But Different: Discovering SQL Injections Incrementally with Isomorphic SQL Statements

    By Nytro, April 15, 2020
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • April 15, 2020

13. XML External Entity (XXE) Attacks and How to Avoid Them

    By Nytro, April 15, 2020
    • 0 replies
    • 2.2k views
    • 
    • Nytro
    • April 15, 2020

14. Bounty Tip: How to bypass authorization in SAML !

    By Nytro, April 15, 2020
    • 0 replies
    • 1.6k views
    • 
    • Nytro
    • April 15, 2020

15. Filtering the Crap, Content Security Policy (CSP) Reports

    By Nytro, April 15, 2020
    • 0 replies
    • 1.5k views
    • 
    • Nytro
    • April 15, 2020

16. Exploiting xdLocalStorage (localStorage and postMessage)

    By Nytro, April 15, 2020
    • 0 replies
    • 2k views
    • 
    • Nytro
    • April 15, 2020

17. HTTP Desync Attacks with Python and AWS

    By Nytro, March 22, 2020
    • 0 replies
    • 2.1k views
    • 
    • Nytro
    • March 22, 2020

18. Gaining AWS Console Access via API Keys

    By Nytro, March 22, 2020
    • 0 replies
    • 1.9k views
    • 
    • Nytro
    • March 22, 2020

19. XXE-scape through the front door

    By Nytro, March 22, 2020
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • March 22, 2020

20. Exploiting SSRFs

    By Nytro, February 25, 2020
    • 2 replies
    • 3.7k views
    • 
    • Nytro
    • February 25, 2020

21. HTTP Request Smuggling – 5 Practical Tips

    By Nytro, February 23, 2020
    • 0 replies
    • 1.9k views
    • 
    • Nytro
    • February 23, 2020

22. CSS data exfiltration in Firefox via a single injection point

    By Nytro, February 23, 2020
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • February 23, 2020

23. Top 10 web hacking techniques of 2019

    By Nytro, January 19, 2020
    • 0 replies
    • 2.3k views
    • 
    • Nytro
    • January 19, 2020

24. Hacking WebSocket

    By Nytro, November 30, 2019
    • 0 replies
    • 2.2k views
    • 
    • Nytro
    • November 30, 2019

25. Advanced Web Hacking by zdResearch

    By KhRadiya, November 25, 2019
    • 0 replies
    • 2k views
    • 
    • KhRadiya
    • November 25, 2019