Securitate web

523 topics in this forum

1. Piercing the Veal: Short Stories to Read with Friends (SSRF)

   By Nytro, May 9, 2020
   • 0 replies
   • 2.3k views
   • 
   • Nytro
   • May 9, 2020

2. Closing the Loop: Practical Attacks and Defences for GraphQL APIs

   By Nytro, May 9, 2020
   • 0 replies
   • 2.3k views
   • 
   • Nytro
   • May 9, 2020

3. SQL INJECTION AND POSTGRES - AN ADVENTURE TO EVENTUAL RCE

   By Nytro, May 9, 2020
   • 0 replies
   • 1.9k views
   • 
   • Nytro
   • May 9, 2020

4. XSS fun with animated SVG

   By Nytro, April 15, 2020
   • 0 replies
   • 1.8k views
   • 
   • Nytro
   • April 15, 2020

5. New Stealth Magecart Attack Bypasses Payment Services Using Iframes

   By Nytro, April 15, 2020
   • 0 replies
   • 2k views
   • 
   • Nytro
   • April 15, 2020

6. Hacking The Web With Unicode

   By Nytro, April 15, 2020
   • 0 replies
   • 1.9k views
   • 
   • Nytro
   • April 15, 2020

7. Breaking and Pwning Apps and Servers on AWS and Azure

   By Nytro, April 15, 2020
   • 0 replies
   • 2.1k views
   • 
   • Nytro
   • April 15, 2020

8. Bypassing modern XSS mitigations with code-reuse attacks

   By Nytro, April 15, 2020
   • 0 replies
   • 2k views
   • 
   • Nytro
   • April 15, 2020

9. HTTP Desync Attacks: Request Smuggling Reborn

   By Nytro, April 15, 2020
   • 0 replies
   • 1.5k views
   • 
   • Nytro
   • April 15, 2020

10. Hunter of Default Logins (Web/HTTP)

    By Nytro, April 15, 2020
    • 0 replies
    • 1.9k views
    • 
    • Nytro
    • April 15, 2020

11. Same Same But Different: Discovering SQL Injections Incrementally with Isomorphic SQL Statements

    By Nytro, April 15, 2020
    • 0 replies
    • 1.5k views
    • 
    • Nytro
    • April 15, 2020

12. XML External Entity (XXE) Attacks and How to Avoid Them

    By Nytro, April 15, 2020
    • 0 replies
    • 2k views
    • 
    • Nytro
    • April 15, 2020

13. Bounty Tip: How to bypass authorization in SAML !

    By Nytro, April 15, 2020
    • 0 replies
    • 1.4k views
    • 
    • Nytro
    • April 15, 2020

14. Filtering the Crap, Content Security Policy (CSP) Reports

    By Nytro, April 15, 2020
    • 0 replies
    • 1.3k views
    • 
    • Nytro
    • April 15, 2020

15. Exploiting xdLocalStorage (localStorage and postMessage)

    By Nytro, April 15, 2020
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • April 15, 2020

16. HTTP Desync Attacks with Python and AWS

    By Nytro, March 22, 2020
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • March 22, 2020

17. Gaining AWS Console Access via API Keys

    By Nytro, March 22, 2020
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • March 22, 2020

18. XXE-scape through the front door

    By Nytro, March 22, 2020
    • 0 replies
    • 1.6k views
    • 
    • Nytro
    • March 22, 2020

19. Exploiting SSRFs

    By Nytro, February 25, 2020
    • 2 replies
    • 3.5k views
    • 
    • Nytro
    • February 25, 2020

20. HTTP Request Smuggling – 5 Practical Tips

    By Nytro, February 23, 2020
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • February 23, 2020

21. CSS data exfiltration in Firefox via a single injection point

    By Nytro, February 23, 2020
    • 0 replies
    • 1.6k views
    • 
    • Nytro
    • February 23, 2020

22. Top 10 web hacking techniques of 2019

    By Nytro, January 19, 2020
    • 0 replies
    • 2.1k views
    • 
    • Nytro
    • January 19, 2020

23. Hacking WebSocket

    By Nytro, November 30, 2019
    • 0 replies
    • 2k views
    • 
    • Nytro
    • November 30, 2019

24. Advanced Web Hacking by zdResearch

    By KhRadiya, November 25, 2019
    • 0 replies
    • 1.9k views
    • 
    • KhRadiya
    • November 25, 2019

25. Shielding applications from an untrusted cloud with Haven

    By Nytro, September 22, 2019
    • 0 replies
    • 2.3k views
    • 
    • Nytro
    • September 22, 2019