dogear

enter for all results · esc to close

Web Security

375 items from qazbnm456/awesome-web-security ★13,892

all kinds

  1. Applied Crypto Hardening bettercrypto.org

    site link ↗

  2. ZeroTrust github.com

    tool link ↗

  3. slurp github.com

    tool link ↗

  4. WebDecoy github.com

    tool link ↗

  5. ZoomEye zoomeye.org

    site link ↗

  6. Neat tricks to bypass CSRF-protection zhuanlan.zhihu.com

    site link ↗

  7. Uber XSS via Cookie zhchbin.github.io

    site link ↗

  8. PUSHING WEBKIT'S BUTTONS WITH A MOBILE PWN2OWN EXPLOIT zerodayinitiative.com

    site link ↗

  9. ZAP by Checkmarx zaproxy.org

    site link ↗

  10. 102 Deep Dive in the Dark Web OSINT Style Kirby Plessas youtube.com

    video · 46 min · Adrian Crenshaw link ↗

  11. Attacking .NET deserialization youtube.com

    video · 39 min · 1ns0mn1h4ck link ↗

  12. .NET Roulette: Exploiting Insecure Deserialization in Telerik UI youtube.com

    video · 44 min · DerpCon link ↗

  13. Phishing with Unicode Domains xudongz.com

    site link ↗

  14. xsschop xsschop.chaitin.cn

    site link ↗

  15. XSS Challenges xss-quiz.int21h.jp

    site link ↗

  16. WCTF2019: Gyotaku The Flag westerns.tokyo

    site link ↗

  17. SQL Injection Pocket Reference websec.ca

    site topic programming link ↗

  18. TL:DR: VPN leaks users’ IPs via WebRTC. I’ve tested seventy VPN providers and 16 of them leaks users’ IPs via WebRTC… voidsec.com

    site link ↗

  19. VirusTotal domain information virustotal.com

    site link ↗

  20. AWS PENETRATION TESTING PART 2. S3, IAM, EC2 virtuesecurity.com

    site link ↗

  21. AWS PENETRATION TESTING PART 1. S3 BUCKETS virtuesecurity.com

    site link ↗

  22. Unicode Domains are bad and you should feel bad for supporting them vgrsec.com

    site link ↗

  23. @shhnjk twitter.com

    site link ↗

  24. @kinugawamasato twitter.com

    site link ↗

  25. @hasegawayosuke twitter.com

    site link ↗

  26. @h3xstream twitter.com

    site link ↗

  27. @garethheyes twitter.com

    site link ↗

  28. @filedescriptor twitter.com

    site link ↗

  29. @cure53berlin twitter.com

    site link ↗

  30. @XssPayloads twitter.com

    site link ↗

  31. Bypass Fix of OOB XXE Using Different encoding twitter.com

    site link ↗

  32. @HackwithGitHub twitter.com

    site link ↗

  33. CVE-2019-1306: ARE YOU MY INDEX? thezdi.com

    site link ↗

  34. The Register theregister.co.uk

    site link ↗

  35. The Hacker News thehackernews.com

    site link ↗

  36. Hunting for Web Shells tenable.com

    site link ↗

  37. WEB APPLICATION PENETRATION TESTING NOTES techvomit.net

    site link ↗

  38. Red Team Tales 0x01: From MSSQL to RCE tarlogic.com

    site link ↗

  39. Pre-authentication XXE vulnerability in the Services Drupal module synacktiv.com

    site link ↗

  40. HQL : Hyperinsane Query Language (or how to access the whole SQL API within a HQL injection ?) synacktiv.com

    site topic programming link ↗

  41. HOW TO EXPLOIT LIFERAY CVE-2020-7961 : QUICK JOURNEY TO POC synacktiv.com

    site link ↗

  42. Databases - start.me start.me

    site topic programming link ↗

  43. Stack Overflow stackoverflow.com

    site link ↗

  44. ssltest ssllabs.com

    site link ↗

  45. SQL Injection Wiki sqlwiki.netspi.com

    site topic programming link ↗

  46. sqlchop sqlchop.chaitin.cn

    site link ↗

  47. SPLOITUS sploitus.com

    site link ↗

  48. The world of Site Isolation and compromised renderer speakerdeck.com

    site link ↗

  49. The Cookie Monster in Your Browsers speakerdeck.com

    site link ↗

  50. Infosec Newbie sneakymonkey.net

    site link ↗
  51. next page of items loading…