dogear

enter for all results · esc to close

Web Security

375 items from qazbnm456/awesome-web-security ★13,892

all kinds

  1. Poor RichFaces codewhitesec.blogspot.com

    site link ↗

  2. Censys censys.io

    site link ↗

  3. How we exploited a remote code execution vulnerability in math.js capacitorset.github.io

    site topic math link ↗

  4. Airbnb – When Bypassing JSON Encoding, XSS Filter, WAF, CSP, and Auditor turns into Eight Vulnerabilities buer.haus

    site link ↗

  5. BRETT BUERHAUS buer.haus

    site link ↗

  6. grayhatwarfare buckets.grayhatwarfare.com

    site link ↗

  7. Broken Browser brokenbrowser.com

    site link ↗

  8. GitHub Enterprise Remote Code Execution bounty.github.com

    site topic programming link ↗

  9. Особенности Safari в client-side атаках bo0om.ru

    site link ↗

  10. The most complete guide to finding anyone’s email blurbiz.io

    site link ↗

  11. SSD Advisory – Chrome Turbofan Remote Code Execution blogs.securiteam.com

    site link ↗

  12. Laravel Content Security Policy: Complete Implementation Guide blog.shakiltech.com

    site link ↗

  13. Remote Code Execution on a Facebook server blog.scrt.ch

    site link ↗

  14. A Methodical Approach to Browser Exploitation blog.ret2.io

    site link ↗

  15. How I Chained 4 vulnerabilities on GitHub Enterprise, From SSRF Execution Chain to RCE! blog.orange.tw

    site link ↗

  16. GitHub Enterprise SQL Injection blog.orange.tw

    site topic programming link ↗

  17. Orange blog.orange.tw

    site link ↗

  18. Hacking with JSP Shells blog.netspi.com

    site link ↗

  19. Forcing XXE Reflection through Server Error Messages blog.netspi.com

    site link ↗

  20. Trend Micro Threat Discovery Appliance - Session Generation Authentication Bypass (CVE-2016-8584) blog.malerisch.net

    site link ↗

  21. HQL for pentesters blog.h3xstream.com

    site link ↗

  22. Advisory: Java/Python FTP Injections Allow for Firewall Bypass blog.blindspotsecurity.com

    site topic programming link ↗

  23. [dev.twitter.com] XSS blog.blackfan.ru

    site link ↗

  24. Another XSS in Google Colaboratory blog.bentkowski.info

    site link ↗

  25. XSS in Google Colaboratory + CSP bypass blog.bentkowski.info

    site link ↗

  26. Setting arbitrary request headers in Chromium via CRLF injection blog.bentkowski.info

    site link ↗

  27. Large-scale analysis of style injection by relative path overwrite blog.acolyer.org

    site link ↗

  28. 0Day Labs blog.0daylabs.com

    site link ↗

  29. A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages! blackhat.com

    site topic programming link ↗

  30. DON'T TRUST THE DOM: BYPASSING XSS MITIGATIONS VIA SCRIPT GADGETS blackhat.com

    site link ↗

  31. Bypassing Mobile Browser Security For Fun And Profit blackhat.com

    site link ↗

  32. The Magic of Learning bitvijays.github.io

    site link ↗

  33. Cybersecurity Campaign Playbook belfercenter.org

    site link ↗

  34. All you need to know about SSRF and how may we write tools to do auto-detect auxy.xyz

    site link ↗

  35. SSL & TLS Penetration Testing aptive.co.uk

    site link ↗

  36. DRUPAL 7.X SERVICES MODULE UNSERIALIZE() TO RCE ambionics.io

    site link ↗

  37. alert(1) to win alf.nu

    site link ↗

  38. James Kettle albinowax.skeletonscribe.net

    site link ↗

  39. The 200 That Proved Nothing aivist.dev

    site link ↗

  40. From DNS Evidence to a Finding: DNS and Mail Security Methodology admintoolkit.io

    site link ↗

  41. Where the LLM Stops: Deterministic Scoring in an AI-Assisted VAPT Pipeline aayushyadav.hashnode.dev

    site topic ai link ↗

  42. The bug bounty program that changed my life 10degres.net

    site link ↗

  43. AWS takeover through SSRF in JavaScript 10degres.net

    site topic programming link ↗

  44. An example why NAT is NOT security 0day.work

    site link ↗

  45. Altus iX Developer XAML Deserialization RCE 0day-rubbish.com

    site topic programming link ↗