3 ms·
It's somewhat disheartening as a security enthusiast that people only focus on "popular" security bugs and ignore the rest. The other top 21 bug classes aren't
by throwawaaarrgh 3y ago
It's somewhat disheartening as a security enthusiast that people only focus on "popular" security bugs and ignore the rest. The other top 21 bug classes aren't as "cool" but they will let me hack your app just the same.
- HideousKojima 3y agoSure, but SQL Injection will let a script kiddie steal and/or drop your entire poorly configured production DB.
- rainonmoon 3y agoIt also provides several paths to RCE depending on the environment, not just exfil.