Story Behind Sweet SSRF.
Story Behind Sweet SSRF
#web #hack #ssrf
Рубрика: web
The Secret Parameter, LFR, and Potential RCE in NodeJS Apps
The Secret Parameter, LFR, and Potential RCE in NodeJS Apps
#web #hacking #hack #nodeJS
How I hacked Facebook: Part One
How I hacked Facebook: Part One
#web #security #facebook #csrf
Escalating XSS to Account Takeover
Escalating XSS to Account Takeover
#xss #web #security
Weaponizing XSS For Fun & Profit
Weaponizing XSS For Fun & Profit
#web #security #xss
Burp Suite vs OWASP ZAP – a Comparison series
Burp Suite vs OWASP ZAP – a Comparison series
#burp #burppro #suite #owasp #zap #zap-a
Public password dumps in ELK
Passwords, passwords, passwords: end users and defenders hate them, attackers love them. Despite the recent focus on stronger authentication forms by defenders, passwords are still the predominant way to get access to systems.
CARPE (DIEM): CVE-2019-0211 Apache Root Privilege Escalation
Original text by cfreal Escalation 2019-04-03 Introduction From version 2.4.17 (Oct 9, 2015) to version 2.4.38 (Apr 1, 2019), Apache HTTP suffers
Insomni’Hack Teaser 2019 — exploit-space
Original text by @Ghostx_0 CTF URL: https://teaser.insomnihack.ch/ Solves: 7 / Points: 500 / Category: Web Challenge description We have created a little exploit