Web Security

375 items from qazbnm456/awesome-web-security ★13,892

JavaScript MVC and Templating Frameworks slideshare.net

site topic programming link ↗
ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and everything else slideshare.net

site topic programming link ↗
ORM Injection slideshare.net

site link ↗
Introduction to Web Application Security slideshare.net

site link ↗
OSINT x UCCU Workshop on Open Source Intelligence slideshare.net

site topic programming link ↗
ORM2Pwn: Exploiting injections in Hibernate ORM slideshare.net

site link ↗
XXE OOB extracting via HTTP+FTP using single opened port skavans.ru

site link ↗
$7.5k Google services mix-up sites.google.com

site link ↗
$36k Google App Engine RCE sites.google.com

site link ↗
Google VRP and Unicorns sites.google.com

site link ↗
SMTP over XXE − how to send emails using Java's XML parser shiftordie.de

site link ↗
Hardcoded secrets, unverified tokens, and other common JWT mistakes semgrep.dev

site link ↗
SELinux Game selinuxgame.org

site topic games link ↗
SecuriTool securitool.js.org

site link ↗
State of TLS on the public web securemonk.io

site link ↗
XXE in WeChat Pay Sdk ( WeChat leave a backdoor on merchant websites) seclists.org

site link ↗
Finding The Real Origin IPs Hiding Behind CloudFlare or TOR secjuice.com

site link ↗
Stored XSS, and SSRF in Google using the Dataset Publishing Language s1gnalcha0s.github.io

site link ↗
Open Redirect Vulnerability s0cket7.com

site link ↗
PENETRATION TESTING AWS STORAGE: KICKING THE S3 BUCKET rhinosecuritylabs.com

site link ↗
Common Azure Security Vulnerabilities and Misconfigurations rhinosecuritylabs.com

site link ↗
Cloud Security Risks (Part 1): Azure CSV Injection Vulnerability rhinosecuritylabs.com

site link ↗
Reddit reddit.com

site link ↗
Rails SQL Injection rails-sqli.org

site topic programming link ↗
Brute Forcing Your Facebook Email and Phone Number pwndizzle.blogspot.jp

site link ↗
SQL INJECTION AND POSTGRES - AN ADVENTURE TO EVENTUAL RCE pulsesecurity.co.nz

site topic programming link ↗
Introduction to OAuth 2.0 and OpenID Connect pragmaticwebsecurity.com

site link ↗
The Next.js security-headers pitfall poszo.com

site link ↗
XML external entity (XXE) injection portswigger.net

site link ↗
XSS without HTML: Client-Side Template Injection with AngularJS portswigger.net

site link ↗
JSON hijacking for the modern web portswigger.net

site link ↗
DOM based Angular sandbox escapes portswigger.net

site link ↗
The Daily Swig - Web security digest portswigger.net

site link ↗
XSS without parentheses and semi-colons portswigger.net

site link ↗
Practical Web Cache Poisoning portswigger.net

site link ↗
Evading CSP with DOM-based dangling markup portswigger.net

site link ↗
Bypassing Web Cache Poisoning Countermeasures portswigger.net

site link ↗
Phrack Magazine phrack.org

site link ↗
XXE phonexicum.github.io

site link ↗
GraphQL NoSQL Injection Through JSON Types petecorey.com

site link ↗
peoplefindThor peoplefindthor.dk

site link ↗
List of bug bounty writeups pentester.land

site link ↗
NFS | PENETRATION TESTING ACADEMY pentestacademy.wordpress.com

site link ↗
How to exploit the DotNetNuke Cookie Deserialization pentest-tools.com

site link ↗
THE BIG BAD WOLF - XSS AND MAINTAINING ACCESS paulosyibelo.com

site link ↗
TWITTER XSS + CSP BYPASS paulosyibelo.com

site link ↗
WebLogic RCE (CVE-2019-2725) Debug Diary paper.seebug.org

site link ↗
Blog of Osanda osandamalith.com

site link ↗
Escape and Evasion Egressing Restricted Networks optiv.com

site link ↗
Exploiting Node.js deserialization bug for Remote Code Execution opsecx.com

site link ↗
next page of items loading…