cujanovic

6 ms·

1. 1.▲
   by cujanovic 7y ago

   https://www.netsparker.com/whitepaper-http-security-headers/
2. 2.▲
   Abusing Enclosed Alphanumerics for SSRF

   1 points by cujanovic 9y ago|0 comments
3. 3.▲
   by cujanovic 9y ago

   This is vulnerable to XSS, payload: [Click Me](javascript:this;alert(document.domain))
4. 4.▲
   SSRF (Server Side Request Forgery) Testing Resources(cujanovic.com)

   1 points by cujanovic 9y ago|0 comments
5. 5.▲
   Open Redirect Payloads(github.com)

   1 points by cujanovic 9y ago|0 comments
6. 6.▲
   SSRF Testing resources – tools and links to help you test for SSRF in web apps(github.com)

   1 points by cujanovic 9y ago|0 comments
7. 7.▲
   How I Hacked My Smart TV from My Bed via a Command Injection(netsparker.com)

   2 points by cujanovic 9y ago|0 comments
8. 8.▲
   CVE-2016-8610 (SSL Death Alert) PoC(github.com)

   1 points by cujanovic 10y ago|0 comments
9. 9.▲
   The State of Wordpress Security(blog.ripstech.com)

   6 points by cujanovic 10y ago|1 comments
10. 10.▲
    Backslash Powered Scanning: Hunting Unknown Vulnerability Classes(blog.portswigger.net)

    4 points by cujanovic 10y ago|0 comments
11. 11.▲
    Linux containers in 500 lines of code(blog.lizzie.io)

    2 points by cujanovic 10y ago|0 comments
12. 12.▲
    CSRF protection bypass on any Django powered site via Google Analytics(hackerone.com)

    2 points by cujanovic 10y ago|0 comments
13. 13.▲
    How I gained access to TMobile’s national network for free(medium.com)

    62 points by cujanovic 10y ago|10 comments
14. 14.▲
    Nginx resolver vulnerabilities allow cache poisoning attack(blog.zorinaq.com)

    1 points by cujanovic 10y ago|0 comments
15. 15.▲
    How I Could Have Hacked Multiple Facebook Accounts(medium.com)

    5 points by cujanovic 10y ago|0 comments
16. 16.▲
    Vulnerability in the Linux kernel's tcp stack implementation(blogs.akamai.com)

    3 points by cujanovic 10y ago|0 comments
17. 17.▲
    The Imperva HTTP/2 Vulnerability Report and NGINX(nginx.com)

    2 points by cujanovic 10y ago|0 comments
18. 18.▲
    How to steal any developer's local database(bouk.co)

    2 points by cujanovic 10y ago|0 comments
19. 19.▲
    HTTP/2: Faster and better than HTTP 1.1, but is it more secure? [pdf](imperva.com)

    6 points by cujanovic 10y ago|0 comments
20. 20.▲
    Mr Robot S02E01 easter egg(0x41.no)

    6 points by cujanovic 10y ago|0 comments
21. 21.▲
    Firefox – Same-Origin Policy Bypass (CVE-2015-7188)(blog.bentkowski.info)

    32 points by cujanovic 10y ago|5 comments
22. 22.▲
    Debian Exim Spool Local Root(halfdog.net)

    1 points by cujanovic 10y ago|0 comments
23. 23.▲
    Auditing CSP Headers with Burp and ZAP(blog.gosecure.ca)

    1 points by cujanovic 10y ago|0 comments
24. 24.▲
    XSS and WordPress – The Aftermath(research.g0blin.co.uk)

    2 points by cujanovic 10y ago|0 comments
25. 25.▲
    Nginx: Supporting HTTP/2 for Google Chrome Users(nginx.com)

    5 points by cujanovic 10y ago|0 comments
26. 26.▲
    Integer Overflow in php_html_entities()(bugs.php.net)

    2 points by cujanovic 10y ago|0 comments
27. 27.▲
    Mr. Robot Blind SQL Injection Vulnerability(corenumb.wordpress.com)

    101 points by cujanovic 10y ago|35 comments
28. 28.▲
    Jenkins Security Advisory 2016-05-11(wiki.jenkins-ci.org)

    1 points by cujanovic 10y ago|0 comments
29. 29.▲
    WordPress 4.5.1 XSS(midzer0.github.io)

    4 points by cujanovic 10y ago|1 comments
30. 30.▲
    Hogwatch – a bandwidth monitor that shows per process network transfer(github.com)

    195 points by cujanovic 10y ago|52 comments