Security

5,347 items in 29 lists

List of bug bounty writeups pentester.land

site link ↗
NFS | PENETRATION TESTING ACADEMY pentestacademy.wordpress.com

site link ↗
How to exploit the DotNetNuke Cookie Deserialization pentest-tools.com

site link ↗
THE BIG BAD WOLF - XSS AND MAINTAINING ACCESS paulosyibelo.com

site link ↗
TWITTER XSS + CSP BYPASS paulosyibelo.com

site link ↗
WebLogic RCE (CVE-2019-2725) Debug Diary paper.seebug.org

site link ↗
Blog of Osanda osandamalith.com

site link ↗
Escape and Evasion Egressing Restricted Networks optiv.com

site link ↗
Exploiting Node.js deserialization bug for Remote Code Execution opsecx.com

site link ↗
Into the Borg – SSRF inside Google production network opnsec.com

site link ↗
Stored XSS on Facebook opnsec.com

site link ↗
OpnSec opnsec.com

site link ↗
OpenBuckets openbuckets.io

site link ↗
NSFOCUS nti.nsfocus.com

site link ↗
Some Problems Of URLs noncombatant.org

site link ↗
CSV Injection -> Meterpreter on Pornhub news.webamooz.com

site link ↗
SQL Injection Cheat Sheet netsparker.com

site topic programming link ↗
Web Application Security Zone by Netsparker netsparker.com

site link ↗
ModSecurity / OWASP ModSecurity Core Rule Set netnea.com

site link ↗
n0tr00t n0tr00t.com

site link ↗
Exploiting XXE with local DTD files mohemiv.com

site link ↗
Evil XML with two encodings mohemiv.com

site link ↗
DOS File Path Magic Tricks medium.com

site link ↗
What is going on with OAuth 2.0? And why you should not use it for authentication. medium.com

site link ↗
Web Application Firewall (WAF) Evasion Techniques #2 medium.com

site link ↗
Web Application Firewall (WAF) Evasion Techniques medium.com

site link ↗
PHP SSRF Techniques medium.com

site link ↗
How I got my first big bounty payout with Tesla medium.com

site link ↗
How I hacked Google’s bug tracking system itself for $15,600 in bounties medium.com

site link ↗
XSS-Auditor — the protector of unprotected and the deceiver of protected. medium.com

site link ↗
Piercing the Veil: Server Side Request Forgery to NIPRNet access medium.com

site link ↗
Be careful what you copy: Invisibly inserting usernames into text with Zero-Width Characters medium.com

site · @umpox link ↗
Making a Blind SQL Injection a little less blind medium.com

site · @tomnomnom topic programming link ↗
Hacking Cryptocurrency Miners with OSINT Techniques medium.com

site · @s3yfullah link ↗
Clickjackings in Google worth 14981.7$ medium.com

site · @raushanraj_65039 link ↗
Hacking home routers from the Internet medium.com

site · @radekk link ↗
How I found a $5,000 Google Maps XSS (by fiddling with Protobuf) medium.com

site · @marin_m link ↗
Wiping Out CSRF medium.com

site · @jrozner link ↗
How to bypass libinjection in many WAF/NGWAF medium.com

site · @d0znpp link ↗
Attacking Private Networks from the Internet with DNS Rebinding medium.com

site · @brannondorsey link ↗
If HttpOnly You Could Still CSRF… Of CORS you can! medium.com

site · @_graphx link ↗
XML Out-Of-Band Data Retrieval media.blackhat.com

site link ↗
MBSD Technical Whitepaper - A few RPO exploitation techniques mbsd.jp

site link ↗
Some Tricks From My Secret Group leavesongs.com

site link ↗
leavesongs leavesongs.com

site link ↗
XSS Cheat Sheet - 2018 Edition leanpub.com

site link ↗
How I exploited ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting labs.detectify.com

site link ↗
CSP: bypassing form-action with reflected XSS labs.detectify.com

site link ↗
Neatly bypassing CSP lab.wallarm.com

site link ↗
Cache poisoning and other dirty tricks lab.wallarm.com

site link ↗
next page of items loading…