dogear

enter for all results · esc to close

Web Security

375 items from qazbnm456/awesome-web-security ★13,892

sites

  1. Open Redirect Vulnerability s0cket7.com

    site link ↗

  2. PENETRATION TESTING AWS STORAGE: KICKING THE S3 BUCKET rhinosecuritylabs.com

    site link ↗

  3. Common Azure Security Vulnerabilities and Misconfigurations rhinosecuritylabs.com

    site link ↗

  4. Cloud Security Risks (Part 1): Azure CSV Injection Vulnerability rhinosecuritylabs.com

    site link ↗

  5. Reddit reddit.com

    site link ↗

  6. Rails SQL Injection rails-sqli.org

    site topic programming link ↗

  7. Brute Forcing Your Facebook Email and Phone Number pwndizzle.blogspot.jp

    site link ↗

  8. SQL INJECTION AND POSTGRES - AN ADVENTURE TO EVENTUAL RCE pulsesecurity.co.nz

    site topic programming link ↗

  9. Introduction to OAuth 2.0 and OpenID Connect pragmaticwebsecurity.com

    site link ↗

  10. The Next.js security-headers pitfall poszo.com

    site link ↗

  11. XML external entity (XXE) injection portswigger.net

    site link ↗

  12. XSS without HTML: Client-Side Template Injection with AngularJS portswigger.net

    site link ↗

  13. JSON hijacking for the modern web portswigger.net

    site link ↗

  14. DOM based Angular sandbox escapes portswigger.net

    site link ↗

  15. The Daily Swig - Web security digest portswigger.net

    site link ↗

  16. XSS without parentheses and semi-colons portswigger.net

    site link ↗

  17. Practical Web Cache Poisoning portswigger.net

    site link ↗

  18. Evading CSP with DOM-based dangling markup portswigger.net

    site link ↗

  19. Bypassing Web Cache Poisoning Countermeasures portswigger.net

    site link ↗

  20. Phrack Magazine phrack.org

    site link ↗

  21. XXE phonexicum.github.io

    site link ↗

  22. GraphQL NoSQL Injection Through JSON Types petecorey.com

    site link ↗

  23. peoplefindThor peoplefindthor.dk

    site link ↗

  24. List of bug bounty writeups pentester.land

    site link ↗

  25. NFS | PENETRATION TESTING ACADEMY pentestacademy.wordpress.com

    site link ↗

  26. How to exploit the DotNetNuke Cookie Deserialization pentest-tools.com

    site link ↗

  27. THE BIG BAD WOLF - XSS AND MAINTAINING ACCESS paulosyibelo.com

    site link ↗

  28. TWITTER XSS + CSP BYPASS paulosyibelo.com

    site link ↗

  29. WebLogic RCE (CVE-2019-2725) Debug Diary paper.seebug.org

    site link ↗

  30. Blog of Osanda osandamalith.com

    site link ↗

  31. Escape and Evasion Egressing Restricted Networks optiv.com

    site link ↗

  32. Exploiting Node.js deserialization bug for Remote Code Execution opsecx.com

    site link ↗

  33. Into the Borg – SSRF inside Google production network opnsec.com

    site link ↗

  34. Stored XSS on Facebook opnsec.com

    site link ↗

  35. OpnSec opnsec.com

    site link ↗

  36. OpenBuckets openbuckets.io

    site link ↗

  37. NSFOCUS nti.nsfocus.com

    site link ↗

  38. Some Problems Of URLs noncombatant.org

    site link ↗

  39. CSV Injection -> Meterpreter on Pornhub news.webamooz.com

    site link ↗

  40. SQL Injection Cheat Sheet netsparker.com

    site topic programming link ↗

  41. Web Application Security Zone by Netsparker netsparker.com

    site link ↗

  42. ModSecurity / OWASP ModSecurity Core Rule Set netnea.com

    site link ↗

  43. n0tr00t n0tr00t.com

    site link ↗

  44. Exploiting XXE with local DTD files mohemiv.com

    site link ↗

  45. Evil XML with two encodings mohemiv.com

    site link ↗

  46. DOS File Path Magic Tricks medium.com

    site link ↗

  47. What is going on with OAuth 2.0? And why you should not use it for authentication. medium.com

    site link ↗

  48. Web Application Firewall (WAF) Evasion Techniques #2 medium.com

    site link ↗

  49. Web Application Firewall (WAF) Evasion Techniques medium.com

    site link ↗

  50. PHP SSRF Techniques medium.com

    site link ↗
  51. next page of items loading…