sharestuff

4 ms·

1. 1.▲
   by sharestuff 5y ago

   Are you familiar? 1. HTTP/2 Smuggling 2. XXE via Office Open XML Parsers 3. SSRF via XSS in PDF Generators 4. XSS via SVG Files 5. Blind XSS 6. Web Cache Deception 7. Web Cache Poisoning 8. h2c Smuggling 9. Second Order Subdomain Takeo
2. 2.▲
   How to set up Docker for Varnish HTTP/2 request smuggling(labs.detectify.com)

   2 points by sharestuff 5y ago|0 comments
3. 3.▲
   How to Hack APIs in 2021(labs.detectify.com)

   334 points by sharestuff 5y ago|89 comments
4. 4.▲
   CVE-2020-29653: Stealing Froxlor login credentials using dangling markup(labs.detectify.com)

   1 points by sharestuff 6y ago|0 comments
5. 5.▲
   by sharestuff 6y ago

   There was a follow-up to this released last week by Frans Rosen on Detectify Labs that looked into middleware in general and still applicable to nginx: https://labs.detectify.com/2021/02/18/middleware-middlewa
6. 6.▲
   by sharestuff 6y ago

   You might find this follow up research interesting. It says gixy doesn't cover all: https://labs.detectify.com/2021/02/18/middleware-middleware-...
7. 7.▲
   Tackling modern PHP bug classes(labs.detectify.com)

   2 points by sharestuff 6y ago|0 comments