PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Smashing the state machine: the true potential of web race conditions

portswigger.net | research | #web-security | #research | #race-conditions | #single-packet-attack | #state-machine
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

New race condition classes beyond limit-overrun exploits compromise major sites and the Devise Rails framework, powered by a single-packet attack squeezing 30 requests into a sub-1ms window.
Published
Collected

Related coverage

research · portswigger.net
How to build custom scanners for web security research automation
Kettle shares his methodology for building custom scanners — automate the smallest possible step, avoid over-committing, embrace unexpected results — using his race-condition scanner as an example.
research · portswigger.net
The single-packet attack: making remote race-conditions 'local'
The single-packet attack completes multiple HTTP/2 requests in one TCP packet, eliminating jitter so remote race conditions behave like local ones; the post adapts it to more protocols.
research · portswigger.net
WebSocket Turbo Intruder: Unearthing the WebSocket Goldmine
WebSocket Turbo Intruder brings Turbo Intruder's fast engine to WebSocket testing, fuzzing messages at high speed with smart filtering to uncover races, prototype pollution and access-control bugs.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
research · vercel.com
Security boundaries in agentic architectures
A framework for drawing security boundaries in agentic architectures. Most agents run with zero isolation between the agent and the code it generates. Learn where to draw the boundaries, from secret injection to full application sandboxing.
research · yokai.hakaisecurity.io
Malicious MSI – Tornando o MSI em uma arma
Abstract Este artigo examina o formato Windows Installer (MSI) sob a perspectiva da segurança da informação, explorando como sua estrutura e funcionalidades podem ser exploradas para fins maliciosos. Através da análise detalhada de amostras recentes de malware, incluindo LegionLoader, RemcosRAT, SilverFox e MetaStealer, o estudo demonstra as diversas técnicas utilizadas por atores maliciosos para weaponizar […]
Back