Securitate web

511 topics in this forum

1. How I found 5 ReDOS Vulnerabilities in Mod Security CRS

   By Nytro, April 24, 2019
   • 0 replies
   • 1.2k views
   • 
   • Nytro
   • April 24, 2019

2. OWASP Cheat Sheet Series V2

   By Nytro, April 24, 2019
   • 0 replies
   • 1.1k views
   • 
   • Nytro
   • April 24, 2019

3. Make Redirection Evil Again:URLParser Issues in OAuth

   By Nytro, April 24, 2019
   • 0 replies
   • 922 views
   • 
   • Nytro
   • April 24, 2019

4. Same-Origin Policy: From birth until today

   By Nytro, April 7, 2019
   • 0 replies
   • 1.4k views
   • 
   • Nytro
   • April 7, 2019

5. Handlebars template injection and RCE in a Shopify app

   By Nytro, April 7, 2019
   • 0 replies
   • 1.3k views
   • 
   • Nytro
   • April 7, 2019

6. Web Security Academy

   By Nytro, April 7, 2019
   • 0 replies
   • 1.4k views
   • 
   • Nytro
   • April 7, 2019

7. TLS Security 1: What Is SSL/TLS

   By Nytro, April 7, 2019
   • 0 replies
   • 1.2k views
   • 
   • Nytro
   • April 7, 2019

8. Selfie: reflections on TLS 1.3 with PSK

   By Nytro, April 7, 2019
   • 0 replies
   • 1.2k views
   • 
   • Nytro
   • April 7, 2019

9. What you see is not what you get: when homographs attack

   By Nytro, April 7, 2019
   • 0 replies
   • 1.2k views
   • 
   • Nytro
   • April 7, 2019

10. Escalating SSRF to RCE

    By Nytro, March 13, 2019
    • 1 reply
    • 2.1k views
    • 
    • u0m3
    • March 14, 2019

11. Exploiting OGNL Injection in Apache Struts

    By Nytro, March 14, 2019
    • 0 replies
    • 1.5k views
    • 
    • Nytro
    • March 14, 2019

12. WordPress 5.1 CSRF to Remote Code Execution

    By Nytro, March 13, 2019
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • March 13, 2019

13. A Saga of Code Executions on Zimbra

    By Nytro, March 13, 2019
    • 0 replies
    • 3.1k views
    • 
    • Nytro
    • March 13, 2019

14. CVE-2019-0604: Details of a Microsoft SharePoint RCE Vulnerability

    By Nytro, March 13, 2019
    • 0 replies
    • 2.8k views
    • 
    • Nytro
    • March 13, 2019

15. Shopware 5.3.3: PHP Object Instantiation to Blind XXE

    By Nytro, March 13, 2019
    • 0 replies
    • 1.6k views
    • 
    • Nytro
    • March 13, 2019

16. Facebook Messenger server random memory exposure through corrupted GIF image

    By Nytro, March 13, 2019
    • 0 replies
    • 1.3k views
    • 
    • Nytro
    • March 13, 2019

17. Tomcat exploit variant : host-manager

    By Nytro, March 13, 2019
    • 0 replies
    • 1.4k views
    • 
    • Nytro
    • March 13, 2019

18. Vimeo SSRF with code execution potential.

    By Nytro, March 13, 2019
    • 0 replies
    • 1.2k views
    • 
    • Nytro
    • March 13, 2019

19. Account Takeover Using Cross-Site WebSocket Hijacking (CSWH)

    By Nytro, March 13, 2019
    • 0 replies
    • 1.2k views
    • 
    • Nytro
    • March 13, 2019

20. Exploiting CVE-2018-1335: Command Injection in Apache Tika

    By Nytro, March 13, 2019
    • 0 replies
    • 1k views
    • 
    • Nytro
    • March 13, 2019

21. Analyzing WordPress Remote Code Execution Vulnerabilities CVE-2019-8942 and CVE-2019-8943

    By Nytro, February 27, 2019
    • 1 reply
    • 2k views
    • 
    • Shashank
    • March 9, 2019

22. SVG XLink SSRF fingerprinting libraries version

    By Nytro, March 5, 2019
    • 1 reply
    • 2.1k views
    • 
    • 0xStrait
    • March 6, 2019

23. Bypassing a restrictive JS sandbox

    By Nytro, March 5, 2019
    • 0 replies
    • 1.3k views
    • 
    • Nytro
    • March 5, 2019

24. Universal RCE with Ruby YAML.load

    By Nytro, March 5, 2019
    • 0 replies
    • 1.3k views
    • 
    • Nytro
    • March 5, 2019

25. Top 10 web hacking techniques of 2018

    By Nytro, February 27, 2019
    • 0 replies
    • 1.5k views
    • 
    • Nytro
    • February 27, 2019