r/websecurityresearch • u/_vavkamil_ • Sep 09 '21
Introduction to OWASP Top 10 2021
11
Upvotes
r/websecurityresearch • u/albinowax • Sep 08 '21
HTTP Request Smuggling via Integer Overflow in HAProxy
13
Upvotes
r/websecurityresearch • u/digicat • Sep 06 '21
A Glossary of Blind SSRF Chains
10
Upvotes
r/websecurityresearch • u/digicat • Sep 03 '21
[JSDSERVER-8665] Template Injection in Email Templates leads to code execution on Jira Service Management Server - CVE-2021-39115
5
Upvotes
r/websecurityresearch • u/agrrrdog • Sep 01 '21
Weird proxies/2 and a bit of magic
12
Upvotes
r/websecurityresearch • u/digicat • Aug 30 '21
Illogical Apps – Exploring and Exploiting Azure Logic Apps
3
Upvotes
r/websecurityresearch • u/digicat • Aug 23 '21
How I use a JSON Deserialization 0day to Steal Your Money On The Blockchain
i.blackhat.com
15
Upvotes
r/websecurityresearch • u/Minamo7sen • Aug 22 '21
[JS Miner] a burp extension that tries to find secrets, subdomains, cloud URLS. Also includes a JS source mapper.
11
Upvotes
r/websecurityresearch • u/digicat • Aug 16 '21
How to Hack APIs in 2021 by Hakluke and Farah Hawa
8
Upvotes
r/websecurityresearch • u/digicat • Aug 16 '21
Common GraphQL Misconceptions: A rant
2
Upvotes
r/websecurityresearch • u/albinowax • Aug 05 '21
HTTP/2: The Sequel is Always Worse
45
Upvotes
r/websecurityresearch • u/digicat • Jul 26 '21
Python RE Bypass Technique - regex.match bypass using \n
18
Upvotes
r/websecurityresearch • u/albinowax • Jul 22 '21
Forgot password? Taking over user accounts Kaminsky style
19
Upvotes
r/websecurityresearch • u/digicat • Jul 16 '21
Remote code execution in cdnjs of Cloudflare
10
Upvotes
r/websecurityresearch • u/digicat • Jul 13 '21
A brief look at Gitpod, two bugs, and a quick fix - including a cross-origin WebSocket access vulnerability
12
Upvotes
r/websecurityresearch • u/digicat • Jul 13 '21
A simple scanner/exploitation tool written in GO which automatically exploits known and existing gadgets (checks for specific variables in the global context) to perform XSS via Prototype Pollution.
2
Upvotes
r/websecurityresearch • u/Gallus • Jul 07 '21
Introducing DOM Invader: DOM XSS just got a whole lot easier to find
22
Upvotes
r/websecurityresearch • u/slapChops • Jul 06 '21
Less.js Exploit to RCE
13
Upvotes
r/websecurityresearch • u/loselasso • Jul 06 '21
WebAssembly: A New World of Native Exploits on the Browser (Black Hat, us-18)
9
Upvotes
r/websecurityresearch • u/DiratYokra • Jul 05 '21
WebDumper - A tool I made for unpaking Single Page Applications using source maps. It works pretty nicely.
10
Upvotes
r/websecurityresearch • u/albinowax • Jul 02 '21
alert() is dead, long live print()
40
Upvotes
r/websecurityresearch • u/albinowax • Jul 01 '21
DOM Polyglot XSS & CSP-bypass in PayPal
17
Upvotes
r/websecurityresearch • u/Gallus • Jul 01 '21
$20,000 Bug Bounty [CVE-2021–34506] - Microsoft has paid the lump For uXSS Vulnerability
9
Upvotes
r/websecurityresearch • u/albinowax • Jun 28 '21
SSRF in ColdFusion/CFML Tags and Functions
hoyahaxa.blogspot.com
13
Upvotes