d0bby

6 ms·

1.
by d0bby 7y ago
> Turns out an unrelated 3rd party can suddenly remotely disable Tor anonymity protections at their whim, and possibly endanger TBB users (or deliberately help in deanonymizing them). > remotely disable Tor anonymity protections [!] M
2.
Jason Haddix' XSS Mindmap(raw.githubusercontent.com)
1 points by d0bby 7y ago|0 comments
3.
OS Command Injection [video](d21v5rjx8s17cr.cloudfront.net)
1 points by d0bby 7y ago|0 comments
4.
The Intigriti XSS challenge is over, but still up. Give it a try(challenge.intigriti.io)
1 points by d0bby 7y ago|0 comments
5.
by d0bby 7y ago
I like how this is a trend now, fake popups, fake url bars. Maybe _unique_ browser designs would help users.
6.
Escaping Alcatraz: Breaking Out of [ ] Sandboxed Environments – Kirk Hayes(youtube.com)
3 points by d0bby 7y ago|0 comments
7.
Fingerprinting Organizations with Collected Archives(github.com)
2 points by d0bby 7y ago|0 comments
8.
by d0bby 7y ago
Giving your license/id when asked does not need talking... Jk, ofc you need to talk, for example to explain that you won't answer questions because you have the right to do so.
9.
Why my job is so easy and how you can make it harder – Pen Test War Stories(youtube.com)
2 points by d0bby 7y ago|0 comments
10.
Web Cache Deception Attack – Omer Gil(youtube.com)
1 points by d0bby 7y ago|0 comments
11.
Don't Talk to the Police – James Duane(youtube.com)
15 points by d0bby 7y ago|4 comments
12.
Exploiting CORS Misconfigurations for BTC and Bounties – James Kettle(youtube.com)
2 points by d0bby 7y ago|0 comments
13.
0d0a CRLF Injection and More SSRF Magic(youtube.com)
2 points by d0bby 7y ago|0 comments
14.
by d0bby 7y ago
Yeah mutt is pretty awesome... but since many mails these days are html you'll go through some trouble!
15.
RCE in EA's Origin Desktop Client(blog.underdogsecurity.com)
1 points by d0bby 7y ago|0 comments
16.
Attacking Modern Web Technologies – Frans Rosen(youtube.com)
2 points by d0bby 7y ago|0 comments
17.
by d0bby 7y ago
> My hunch tells me this is not good. After some clicking I found this: https://github.com/uBlockOrigin/uAssets/issues/4080#issuecom... , might be interesting
18.
by d0bby 7y ago
People are talking about uBlock Origin... I really like it, no doubts it's good and everyone should consider using it. BUT, since we are talking about uBlock Origin, I'd like to mention another awesome extention Raymond Hill made.
19.
@albinowax: CTF Writeup [H1-212](skeletonscribe.net)
1 points by d0bby 7y ago|0 comments
20.
Illustration: How a Bug Bounty Works(hackerone.com)
1 points by d0bby 7y ago|0 comments
21.
by d0bby 7y ago
"How does a deployable web-application know where it is? Creating a trustworthy absolute URI is trickier than it sounds. Developers often resort to the exceedingly untrustworthy HTTP Host header (_SERVER["HTTP_HOST"] in PHP)&
22.
Password Reset and Web-Cache Poisoning (and a Little Surprise in RFC-2616)(skeletonscribe.net)
2 points by d0bby 7y ago|1 comments
23.
by d0bby 8y ago
I'm using it with a VPN rn, it's working fine. But yeah using a VPN/TOR increases the risk profile (or whatever they call it). It even slows down the animation of loading new images, it drives me crazy.
24.
by d0bby 8y ago
I'm trying it out right now. Works! I heard about people using Googles Speech-to-Text to solve the audio challenge some time ago... ty for showing this 1!
25.
by d0bby 8y ago
I'm trying to do so too, but it's hard. But it's hard to find alternatives for some sites...
26.
How many hours do you reCAPTCHA per week?
4 points by d0bby 8y ago|8 comments
27.
by d0bby 8y ago
ok
28.
Exact String Pattern Recognition [pdf](ocw.upm.es)
1 points by d0bby 8y ago|0 comments
29.
by d0bby 8y ago
"Europe-wide protests are planned to take place on 23rd of March" See you there! ;)
30.
by d0bby 8y ago
Very very nice, some new filters.

More ›