dogear

enter for all results · esc to close

Web Security

375 items from qazbnm456/awesome-web-security ★13,892

sites

  1. How I got my first big bounty payout with Tesla medium.com

    site link ↗

  2. How I hacked Google’s bug tracking system itself for $15,600 in bounties medium.com

    site link ↗

  3. XSS-Auditor — the protector of unprotected and the deceiver of protected. medium.com

    site link ↗

  4. Piercing the Veil: Server Side Request Forgery to NIPRNet access medium.com

    site link ↗

  5. Be careful what you copy: Invisibly inserting usernames into text with Zero-Width Characters medium.com

    site · @umpox link ↗

  6. Making a Blind SQL Injection a little less blind medium.com

    site · @tomnomnom topic programming link ↗

  7. Hacking Cryptocurrency Miners with OSINT Techniques medium.com

    site · @s3yfullah link ↗

  8. Clickjackings in Google worth 14981.7$ medium.com

    site · @raushanraj_65039 link ↗

  9. Hacking home routers from the Internet medium.com

    site · @radekk link ↗

  10. How I found a $5,000 Google Maps XSS (by fiddling with Protobuf) medium.com

    site · @marin_m link ↗

  11. Wiping Out CSRF medium.com

    site · @jrozner link ↗

  12. How to bypass libinjection in many WAF/NGWAF medium.com

    site · @d0znpp link ↗

  13. Attacking Private Networks from the Internet with DNS Rebinding medium.com

    site · @brannondorsey link ↗

  14. If HttpOnly You Could Still CSRF… Of CORS you can! medium.com

    site · @_graphx link ↗

  15. XML Out-Of-Band Data Retrieval media.blackhat.com

    site link ↗

  16. MBSD Technical Whitepaper - A few RPO exploitation techniques mbsd.jp

    site link ↗

  17. Some Tricks From My Secret Group leavesongs.com

    site link ↗

  18. leavesongs leavesongs.com

    site link ↗

  19. XSS Cheat Sheet - 2018 Edition leanpub.com

    site link ↗

  20. How I exploited ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting labs.detectify.com

    site link ↗

  21. CSP: bypassing form-action with reflected XSS labs.detectify.com

    site link ↗

  22. Neatly bypassing CSP lab.wallarm.com

    site link ↗

  23. Cache poisoning and other dirty tricks lab.wallarm.com

    site link ↗

  24. The inception bar: a new phishing method jameshfisher.com

    site link ↗

  25. Clickjacking imperva.com

    site link ↗

  26. Pentest + Exploit dev Cheatsheet wallpaper i.imgur.com

    site link ↗

  27. Hackxor hackxor.net

    site link ↗

  28. Rails Security - First part hackmd.io

    site link ↗

  29. SSRF in Exchange leads to ROOT access in all instances hackerone.com

    site link ↗

  30. Query parameter reordering causes redirect page to render unsafe URL hackerone.com

    site link ↗

  31. Sending arbitrary IPC messages via overriding Function.prototype.apply hackerone.com

    site link ↗

  32. SSRF in https://imgur.com/vidgif/url hackerone.com

    site link ↗

  33. Breaking UC Browser habr.com

    site link ↗

  34. Official Rails Security Guide guides.rubyonrails.org

    site link ↗

  35. Automating local DTD discovery for XXE exploitation gosecure.ai

    site link ↗

  36. Cross-Site Scripting – Application Security – Google google.com

    site link ↗

  37. Any protection against dynamic module import? github.com

    site link ↗

  38. PayloadsAllTheThings - XXE Injection github.com

    site link ↗

  39. PayloadsAllTheThings - XSS Injection github.com

    site link ↗

  40. PayloadsAllTheThings - Web Cache Deception github.com

    site link ↗

  41. PayloadsAllTheThings - Upload Insecure Files github.com

    site link ↗

  42. PayloadsAllTheThings - Server-Side Request Forgery github.com

    site link ↗

  43. PayloadsAllTheThings - SQL Injection github.com

    site topic programming link ↗

  44. PayloadsAllTheThings - SAML Injection github.com

    site link ↗

  45. PayloadsAllTheThings - Open Redirect github.com

    site link ↗

  46. PayloadsAllTheThings - CSRF Injection github.com

    site link ↗

  47. PayloadsAllTheThings - Command Injection github.com

    site link ↗

  48. PayloadsAllTheThings - CSV Injection github.com

    site link ↗

  49. Potential command injection in resolv.rb github.com

    site link ↗

  50. Prototype pollution attack in NodeJS application github.com

    site link ↗
  51. next page of items loading…