Skip to content
Hunting asynchronous vulnerabilities
portswigger.net | research | #burp-collaborator | #oast | #vulnerability-hunting | #asynchronous | #callbacks
Summary
James Kettle introduces callback-based hunting for asynchronous vulnerabilities, from blind second-order SQLi to shell injection in background jobs, via exploit-induced callbacks. The basis of OAST.
- Published
- Collected