Securitate web

512 topics in this forum

1. Dirty Browser Enumeration Tricks – Using chrome:// and about:

   By Nytro, September 5, 2014
   • 0 replies
   • 885 views
   • 
   • Nytro
   • September 5, 2014

2. Disclosing Tor users' real IP address through 301 HTTP Redirect Cache Poisoning

   By Nytro, June 2, 2019
   • 0 replies
   • 2.3k views
   • 
   • Nytro
   • June 2, 2019

3. DIVING INTO A WEBSOCKET VULNERABILITY IN APACHE TOMCAT

   By Nytro, November 6, 2020
   • 0 replies
   • 2.9k views
   • 
   • Nytro
   • November 6, 2020

4. DOM Based Cross-site Scripting Vulnerability

   By Nytro, July 18, 2014
   • 0 replies
   • 1.2k views
   • 
   • Nytro
   • July 18, 2014

5. Drupal 7.34 Admin PHP Object Injection

   By Nytro, January 21, 2015
   • 0 replies
   • 995 views
   • 
   • Nytro
   • January 21, 2015

6. DTD Cheat Sheet

   By Nytro, March 2, 2016
   • 0 replies
   • 1.6k views
   • 
   • Nytro
   • March 2, 2016

7. EL 3.0/Lambda Injection: Hacker Friendly Java

   By Nytro, December 18, 2014
   • 0 replies
   • 985 views
   • 
   • Nytro
   • December 18, 2014

8. Enumerating Files Using Server Side Request Forgery and the request Module

   By Nytro, December 21, 2021
   • 0 replies
   • 4.2k views
   • 
   • Nytro
   • December 21, 2021

9. Error Based Injection using UpdateXML

   By Aerosol, November 28, 2014
   • 0 replies
   • 1.1k views
   • 
   • Aerosol
   • November 28, 2014

10. Error-based SQL Injection vectors in Oracle using dbms_spm.* functions

    By Nytro, April 3, 2015
    • 0 replies
    • 867 views
    • 
    • Nytro
    • April 3, 2015

11. Escalating AWS IAM Privileges with an Undocumented CodeStar API

    By Nytro, June 21, 2019
    • 0 replies
    • 1.4k views
    • 
    • Nytro
    • June 21, 2019

12. Escalating SSRF to RCE

    By Nytro, March 13, 2019
    • 1 reply
    • 2.1k views
    • 
    • u0m3
    • March 14, 2019

13. Escalating SSTI to Reflected XSS using curly braces {}

    By Nytro, September 30, 2022
    • 0 replies
    • 3.4k views
    • 
    • Nytro
    • September 30, 2022

14. EVADING ALL WEB-APPLICATION FIREWALLS XSS FILTERS

    By Nytro, March 18, 2016
    • 0 replies
    • 1.4k views
    • 
    • Nytro
    • March 18, 2016

15. Even uploading a JPG file can lead to Cross Domain Data Hijacking

    By Nytro, January 12, 2015
    • 0 replies
    • 870 views
    • 
    • Nytro
    • January 12, 2015

16. Everything you need to know about HTTP security headers

    By Nytro, January 16, 2017
    • 0 replies
    • 2.2k views
    • 
    • Nytro
    • January 16, 2017

17. Everything you need to know about the Shellshock Bash bug

    By Nytro, September 25, 2014
    • 0 replies
    • 1.2k views
    • 
    • Nytro
    • September 25, 2014

18. Exotic HTTP Headers

    By Nytro, December 9, 2016
    • 1 reply
    • 3k views
    • 
    • aelius
    • December 9, 2016

19. Explaining and exploiting deserialization vulnerability with Python (EN)

    By Nytro, September 24, 2017
    • 0 replies
    • 1.2k views
    • 
    • Nytro
    • September 24, 2017

20. Explaining Server Side Template Injections

    By Nytro, September 22, 2019
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • September 22, 2019

21. Exploit PHP’s mail() to get remote code execution

    By Nytro, September 5, 2014
    • 1 reply
    • 2.8k views
    • 
    • Gushterul
    • September 5, 2014

22. Exploit XSS with an Image

    By Usr6, March 26, 2017
    • 0 replies
    • 1.7k views
    • 
    • Usr6
    • March 26, 2017

23. Exploiting 'INSERT INTO' SQL Injections Ninja Style

    By Nytro, March 5, 2016
    • 0 replies
    • 1.3k views
    • 
    • Nytro
    • March 5, 2016

24. Exploiting a blind cross-site scripting vulnerability

    By Nytro, February 10, 2016
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • February 10, 2016

25. Exploiting blind SQL injections in ‘UPDATE’ and ‘INSERT’ statements

    By Nytro, August 24, 2016
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • August 24, 2016