Securitate web

511 topics in this forum

1. Exploiting ViewState Deserialization using Blacklist3r and YSoSerial.Net

   By Nytro, June 21, 2019
   • 0 replies
   • 2.6k views
   • 
   • Nytro
   • June 21, 2019

2. Exploiting XXE with local DTD files

   By Nytro, June 21, 2019
   • 0 replies
   • 1.3k views
   • 
   • Nytro
   • June 21, 2019

3. Escalating AWS IAM Privileges with an Undocumented CodeStar API

   By Nytro, June 21, 2019
   • 0 replies
   • 1.4k views
   • 
   • Nytro
   • June 21, 2019

4. Remote Code Execution via Ruby on Rails Active Storage Insecure Deserialization

   By Nytro, June 21, 2019
   • 0 replies
   • 1.5k views
   • 
   • Nytro
   • June 21, 2019

5. Web tools, or where to start pentester?

   By gigiRoman, June 3, 2019
   • 0 replies
   • 3.8k views
   • 
   • gigiRoman
   • June 3, 2019

6. Exploiting UN-attended Web Servers To Get Domain Admin – Red Teaming

   By Nytro, June 2, 2019
   • 0 replies
   • 2.7k views
   • 
   • Nytro
   • June 2, 2019

7. Disclosing Tor users' real IP address through 301 HTTP Redirect Cache Poisoning

   By Nytro, June 2, 2019
   • 0 replies
   • 2.3k views
   • 
   • Nytro
   • June 2, 2019

8. XML external entity (XXE) injection

   By Nytro, June 2, 2019
   • 0 replies
   • 1.4k views
   • 
   • Nytro
   • June 2, 2019

9. A Questionable Journey From XSS to RCE

   By Nytro, May 20, 2019
   • 0 replies
   • 2.1k views
   • 
   • Nytro
   • May 20, 2019

10. XSS without parentheses and semi-colons

    By Nytro, May 20, 2019
    • 0 replies
    • 1.2k views
    • 
    • Nytro
    • May 20, 2019

11. Exploiting PHP Phar Deserialization Vulnerabilities - Part 1

    By Nytro, May 20, 2019
    • 0 replies
    • 1.3k views
    • 
    • Nytro
    • May 20, 2019

12. Stealing Downloads from Slack Users

    By Nytro, May 20, 2019
    • 0 replies
    • 1.1k views
    • 
    • Nytro
    • May 20, 2019

13. Raw WebAssembly

    By Nytro, May 20, 2019
    • 0 replies
    • 1k views
    • 
    • Nytro
    • May 20, 2019

14. Azure Apps for Command and Control

    By Nytro, May 20, 2019
    • 0 replies
    • 1.1k views
    • 
    • Nytro
    • May 20, 2019

15. Chrome switching the XSSAuditor to filter mode re-enables old attack

    By Nytro, May 14, 2019
    • 0 replies
    • 1.4k views
    • 
    • Nytro
    • May 14, 2019

16. “Web scraping considered dangerous”: Exploiting the telnet service in scrapy < 1.5.2

    By Nytro, May 14, 2019
    • 0 replies
    • 2.1k views
    • 
    • Nytro
    • May 14, 2019

17. Replacing Google Analytics with GoAccess

    By Fi8sVrs, May 13, 2019
    • 0 replies
    • 1.5k views
    • 
    • Fi8sVrs
    • May 13, 2019

18. PHP Object Instantiation (CVE-2015-1033)

    By Nytro, May 9, 2019
    • 0 replies
    • 4.1k views
    • 
    • Nytro
    • May 9, 2019

19. Hack the JWT Token

    By Nytro, May 9, 2019
    • 0 replies
    • 1.2k views
    • 
    • Nytro
    • May 9, 2019

20. XSS-Auditor — the protector of unprotected

    By Nytro, May 9, 2019
    • 0 replies
    • 974 views
    • 
    • Nytro
    • May 9, 2019

21. Tale of a Wormable Twitter XSS

    By Nytro, May 9, 2019
    • 0 replies
    • 1k views
    • 
    • Nytro
    • May 9, 2019

22. Header in ASP.NET to Bypass WAFs Again!

    By Nytro, May 9, 2019
    • 0 replies
    • 1.1k views
    • 
    • Nytro
    • May 9, 2019

23. XSS attacks on Googlebot allow search index manipulation

    By Nytro, May 9, 2019
    • 0 replies
    • 1.2k views
    • 
    • Nytro
    • May 9, 2019

24. Measuring website metrics with curl

    By aelius, May 4, 2019   

    • bash
    • curl
    • (and 2 more)

      Tagged with:

      • bash
      • curl
      • dns lookup
      • website metrics
    • 0 replies
    • 1.3k views
    • 
    • aelius
    • May 4, 2019

25. GitLab 11.4.7 Remote Code Execution

    By Nytro, April 24, 2019
    • 0 replies
    • 1.3k views
    • 
    • Nytro
    • April 24, 2019