dogear

enter for all results · esc to close

Web Security

375 items from qazbnm456/awesome-web-security ★13,892

sites

  1. Forcing XXE Reflection through Server Error Messages blog.netspi.com

    site link ↗

  2. Trend Micro Threat Discovery Appliance - Session Generation Authentication Bypass (CVE-2016-8584) blog.malerisch.net

    site link ↗

  3. HQL for pentesters blog.h3xstream.com

    site link ↗

  4. Advisory: Java/Python FTP Injections Allow for Firewall Bypass blog.blindspotsecurity.com

    site topic programming link ↗

  5. [dev.twitter.com] XSS blog.blackfan.ru

    site link ↗

  6. Another XSS in Google Colaboratory blog.bentkowski.info

    site link ↗

  7. XSS in Google Colaboratory + CSP bypass blog.bentkowski.info

    site link ↗

  8. Setting arbitrary request headers in Chromium via CRLF injection blog.bentkowski.info

    site link ↗

  9. Large-scale analysis of style injection by relative path overwrite blog.acolyer.org

    site link ↗

  10. 0Day Labs blog.0daylabs.com

    site link ↗

  11. A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages! blackhat.com

    site topic programming link ↗

  12. DON'T TRUST THE DOM: BYPASSING XSS MITIGATIONS VIA SCRIPT GADGETS blackhat.com

    site link ↗

  13. Bypassing Mobile Browser Security For Fun And Profit blackhat.com

    site link ↗

  14. The Magic of Learning bitvijays.github.io

    site link ↗

  15. Cybersecurity Campaign Playbook belfercenter.org

    site link ↗

  16. All you need to know about SSRF and how may we write tools to do auto-detect auxy.xyz

    site link ↗

  17. SSL & TLS Penetration Testing aptive.co.uk

    site link ↗

  18. DRUPAL 7.X SERVICES MODULE UNSERIALIZE() TO RCE ambionics.io

    site link ↗

  19. alert(1) to win alf.nu

    site link ↗

  20. James Kettle albinowax.skeletonscribe.net

    site link ↗

  21. The 200 That Proved Nothing aivist.dev

    site link ↗

  22. From DNS Evidence to a Finding: DNS and Mail Security Methodology admintoolkit.io

    site link ↗

  23. Where the LLM Stops: Deterministic Scoring in an AI-Assisted VAPT Pipeline aayushyadav.hashnode.dev

    site topic ai link ↗

  24. The bug bounty program that changed my life 10degres.net

    site link ↗

  25. AWS takeover through SSRF in JavaScript 10degres.net

    site topic programming link ↗

  26. An example why NAT is NOT security 0day.work

    site link ↗

  27. Altus iX Developer XAML Deserialization RCE 0day-rubbish.com

    site topic programming link ↗