1.Shift: AI-Powered Hackingblog | 2025-01-04 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #automation | #web-security
2.Exploiting Second Order SQL Injection with Stored Proceduresvulnerability | 2024-12-22 00:00 | netspi.com | Original ↗ | .md | #sql-injection | #second-order | #oob
3.From Informational to Critical: Chaining & Elevating Web Vulnerabilitiesblog | 2024-12-10 00:00 | netspi.com | Original ↗ | .md | #rce | #privilege-escalation | #xss
4.Escape NodeJS Sandboxesblog | 2018-11-27 00:00 | netspi.com | Original ↗ | .md | #sandbox-escape | #reverse-shell | #javascript
5.XXE in IBM's MaaS360 Platformblog | 2018-10-16 00:00 | netspi.com | Original ↗ | .md | #ssrf | #xxe | #xml
6.Introducing Burp Extractorblog | 2018-08-07 00:00 | netspi.com | Original ↗ | .md | #burp-suite | #tooling | #burp-extension
7.Attacking SSO: Common SAML Vulnerabilities and Ways to Find Themblog | 2017-03-07 00:00 | netspi.com | Original ↗ | .md | #authentication | #sso | #xml
8.Defeating CSRF Protections Through Expired cross-domain.xml Domainsblog | 2017-02-21 00:00 | netspi.com | Original ↗ | .md | #csrf | #flash | #web-pentesting
9.Attacking JavaScript Web Service Proxies with Burpblog | 2017-02-14 00:00 | netspi.com | Original ↗ | .md | #javascript | #json | #web-pentesting
10.Username Discoveryblog | 2017-01-30 00:00 | netspi.com | Original ↗ | .md | #reconnaissance | #authentication | #password-reset
11.Login Portal Security 101blog | 2017-01-23 00:00 | netspi.com | Original ↗ | .md | #attack-surface | #authentication | #web-pentesting
12.Java Deserialization Attacks with Burpblog | 2016-03-02 00:00 | netspi.com | Original ↗ | .md | #burp-extension | #web-pentesting | #java-deserialization
13.Directory Traversal, File Inclusion, and The Proc File Systemblog | 2016-02-23 00:00 | netspi.com | Original ↗ | .md | #linux | #reconnaissance | #directory-traversal
14.Forcing XXE Reflection through Server Error Messagesblog | 2015-05-04 00:00 | netspi.com | Original ↗ | .md | #xxe | #xml | #web-pentesting