Securitate web

524 topics in this forum

1. Prototype pollution attack

   By Nytro, May 18, 2018
   • 0 replies
   • 2.7k views
   • 
   • Nytro
   • May 18, 2018

2. Blind Command Injection Testing with Burp Collaborator

   By Nytro, May 18, 2018
   • 0 replies
   • 1.8k views
   • 
   • Nytro
   • May 18, 2018

3. Exploiting misconfigured CORS Null Origin

   By Nytro, April 23, 2018
   • 0 replies
   • 1.7k views
   • 
   • Nytro
   • April 23, 2018

4. Paseto is a Secure Alternative to the JOSE Standards (JWT, etc.)

   By Nytro, April 23, 2018
   • 0 replies
   • 1.6k views
   • 
   • Nytro
   • April 23, 2018

5. Cross-Protocol Request Forgery

   By Nytro, April 22, 2018
   • 0 replies
   • 1.8k views
   • 
   • Nytro
   • April 22, 2018

6. From XML External Entity to NTLM Domain Hashes

   By Nytro, April 22, 2018
   • 0 replies
   • 1.6k views
   • 
   • Nytro
   • April 22, 2018

7. Avoiding XSS in React is Still Hard

   By Nytro, April 22, 2018
   • 0 replies
   • 1.4k views
   • 
   • Nytro
   • April 22, 2018

8. Gaining filesystem access via blind OOB XXE

   By Nytro, April 2, 2018
   • 0 replies
   • 1.6k views
   • 
   • Nytro
   • April 2, 2018

9. CSP IMPLEMENTATIONS ARE BROKEN

   By Nytro, April 2, 2018
   • 0 replies
   • 1.7k views
   • 
   • Nytro
   • April 2, 2018

10. Introducing XSS Auditor reporting to Report URI

    By Nytro, April 2, 2018
    • 0 replies
    • 2k views
    • 
    • Nytro
    • April 2, 2018

11. Microsoft Office – NTLM Hashes via Frameset

    By Nytro, April 2, 2018
    • 0 replies
    • 1.9k views
    • 
    • Nytro
    • April 2, 2018

12. Abusing XML encoding to bypass WAFs

    By u0m3, February 11, 2018
    • 0 replies
    • 2k views
    • 
    • u0m3
    • February 11, 2018

13. HTTPS with carrier pigeons

    By Usr6, February 11, 2018
    • 0 replies
    • 1.4k views
    • 
    • Usr6
    • February 11, 2018

14. CloudFlair: Bypassing Cloudflare using Internet-wide scan data

    By u0m3, January 19, 2018
    • 0 replies
    • 1.4k views
    • 
    • u0m3
    • January 19, 2018

15. All you need to know about SSRF

    By xenonxsc, December 21, 2017
    • 0 replies
    • 2.3k views
    • 
    • xenonxsc
    • December 21, 2017

16. TLS Redirection (and Virtual Host Confusion)

    By Nytro, November 24, 2017
    • 0 replies
    • 2.7k views
    • 
    • Nytro
    • November 24, 2017

17. OWASP is pleased to announce the release of the OWASP Top 10 - 2017

    By Nytro, November 21, 2017
    • 0 replies
    • 2.5k views
    • 
    • Nytro
    • November 21, 2017

18. Pins And Staples: Enhanced SSL Security

    By SirGod, November 21, 2017
    • 0 replies
    • 1.8k views
    • 
    • SirGod
    • November 21, 2017

19. Exploiting Misconfigured CORS

    By Nytro, October 27, 2017
    • 0 replies
    • 1.8k views
    • 
    • Nytro
    • October 27, 2017

20. Slack SAML authentication bypass

    By Nytro, October 27, 2017
    • 0 replies
    • 1.6k views
    • 
    • Nytro
    • October 27, 2017

21. JavaDeserH2HC

    By Nytro, October 27, 2017
    • 0 replies
    • 1.7k views
    • 
    • Nytro
    • October 27, 2017

22. ADV170014 NTLM SSO: Exploitation Guide

    By SirGod, October 24, 2017
    • 3 replies
    • 4.9k views
    • 
    • Nytro
    • October 25, 2017

23. Using open-uri? Check your code - you're playing with fire!

    By osirium, October 19, 2017
    • 0 replies
    • 1.9k views
    • 
    • osirium
    • October 19, 2017

24. Remote Code Execution on rubygems.org

    By SirGod, October 10, 2017
    • 0 replies
    • 2k views
    • 
    • SirGod
    • October 10, 2017

25. On WordPress Security and Contributing

    By Nytro, September 25, 2017
    • 1 reply
    • 1.9k views
    • 
    • osirium
    • October 5, 2017