dogear

enter for all results · esc to close

Web Security

375 items from qazbnm456/awesome-web-security ★13,892

all kinds

  1. Into the Borg – SSRF inside Google production network opnsec.com

    site link ↗

  2. Stored XSS on Facebook opnsec.com

    site link ↗

  3. OpnSec opnsec.com

    site link ↗

  4. OpenBuckets openbuckets.io

    site link ↗

  5. NSFOCUS nti.nsfocus.com

    site link ↗

  6. Some Problems Of URLs noncombatant.org

    site link ↗

  7. CSV Injection -> Meterpreter on Pornhub news.webamooz.com

    site link ↗

  8. SQL Injection Cheat Sheet netsparker.com

    site topic programming link ↗

  9. Web Application Security Zone by Netsparker netsparker.com

    site link ↗

  10. ModSecurity / OWASP ModSecurity Core Rule Set netnea.com

    site link ↗

  11. n0tr00t n0tr00t.com

    site link ↗

  12. Exploiting XXE with local DTD files mohemiv.com

    site link ↗

  13. Evil XML with two encodings mohemiv.com

    site link ↗

  14. DOS File Path Magic Tricks medium.com

    site link ↗

  15. What is going on with OAuth 2.0? And why you should not use it for authentication. medium.com

    site link ↗

  16. Web Application Firewall (WAF) Evasion Techniques #2 medium.com

    site link ↗

  17. Web Application Firewall (WAF) Evasion Techniques medium.com

    site link ↗

  18. PHP SSRF Techniques medium.com

    site link ↗

  19. How I got my first big bounty payout with Tesla medium.com

    site link ↗

  20. How I hacked Google’s bug tracking system itself for $15,600 in bounties medium.com

    site link ↗

  21. XSS-Auditor — the protector of unprotected and the deceiver of protected. medium.com

    site link ↗

  22. Piercing the Veil: Server Side Request Forgery to NIPRNet access medium.com

    site link ↗

  23. Be careful what you copy: Invisibly inserting usernames into text with Zero-Width Characters medium.com

    site · @umpox link ↗

  24. Making a Blind SQL Injection a little less blind medium.com

    site · @tomnomnom topic programming link ↗

  25. Hacking Cryptocurrency Miners with OSINT Techniques medium.com

    site · @s3yfullah link ↗

  26. Clickjackings in Google worth 14981.7$ medium.com

    site · @raushanraj_65039 link ↗

  27. Hacking home routers from the Internet medium.com

    site · @radekk link ↗

  28. How I found a $5,000 Google Maps XSS (by fiddling with Protobuf) medium.com

    site · @marin_m link ↗

  29. Wiping Out CSRF medium.com

    site · @jrozner link ↗

  30. How to bypass libinjection in many WAF/NGWAF medium.com

    site · @d0znpp link ↗

  31. Attacking Private Networks from the Internet with DNS Rebinding medium.com

    site · @brannondorsey link ↗

  32. If HttpOnly You Could Still CSRF… Of CORS you can! medium.com

    site · @_graphx link ↗

  33. XML Out-Of-Band Data Retrieval media.blackhat.com

    site link ↗

  34. MBSD Technical Whitepaper - A few RPO exploitation techniques mbsd.jp

    site link ↗

  35. Some Tricks From My Secret Group leavesongs.com

    site link ↗

  36. leavesongs leavesongs.com

    site link ↗

  37. XSS Cheat Sheet - 2018 Edition leanpub.com

    site link ↗

  38. How I exploited ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting labs.detectify.com

    site link ↗

  39. CSP: bypassing form-action with reflected XSS labs.detectify.com

    site link ↗

  40. Neatly bypassing CSP lab.wallarm.com

    site link ↗

  41. Cache poisoning and other dirty tricks lab.wallarm.com

    site link ↗

  42. The inception bar: a new phishing method jameshfisher.com

    site link ↗

  43. Clickjacking imperva.com

    site link ↗

  44. Pentest + Exploit dev Cheatsheet wallpaper i.imgur.com

    site link ↗

  45. Hackxor hackxor.net

    site link ↗

  46. Rails Security - First part hackmd.io

    site link ↗

  47. SSRF in Exchange leads to ROOT access in all instances hackerone.com

    site link ↗

  48. Query parameter reordering causes redirect page to render unsafe URL hackerone.com

    site link ↗

  49. Sending arbitrary IPC messages via overriding Function.prototype.apply hackerone.com

    site link ↗

  50. SSRF in https://imgur.com/vidgif/url hackerone.com

    site link ↗
  51. next page of items loading…