Curated security research, vulnerabilities, advisories and tools for practitioners.

#web-security

Security coverage tagged web-security. (Page 10)

271.

Top 10 web hacking techniques of 2019 - nominations open

research | 2020-09-07 13:49 | portswigger.net | original ↗ | #web-security | #community | #research

272.

h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c)

blog | 2020-09-08 00:00 | bishopfox.com | original ↗ | #web-security | #request-smuggling | #vulnerability

273.

Top 10 web hacking techniques of 2018 - nominations open

research | 2020-09-04 14:23 | portswigger.net | original ↗ | #web-security | #community | #research

274.

Calling all Agents: Join our LevelUp0x07 CTF Challenge!

blog | 2020-08-16 00:00 | bugcrowd.com | original ↗ | #ctf | #web-security | #mobile-security

275.

Program Spotlight: Bitdefender

blog | 2020-08-11 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #bugcrowd

276.

Attacking and defending JavaScript sandboxes

research | 2020-07-16 10:39 | portswigger.net | original ↗ | #web-security | #sandbox-escape | #proxy

277.

Documenting the impossible: Unexploitable XSS labs

research | 2020-06-04 09:31 | portswigger.net | original ↗ | #web-security | #xss | #payloads

278.

Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts

blog | 2020-04-19 00:00 | samcurry.net | original ↗ | #bug-bounty | #account-takeover | #web-security

279.

What Is XSS?: An Overview

vulnerability | 2020-03-16 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #owasp

280.

How to Prevent the OWASP Top 10

vulnerability | 2020-02-10 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #owasp

281.

Bugcrowd + PentesterLab — Learn Web Hacking Easier!

blog | 2020-02-11 00:00 | bugcrowd.com | original ↗ | #web-security | #xss | #training

282.

Cracking reCAPTCHA, Turbo Intruder style

research | 2019-11-20 15:33 | portswigger.net | original ↗ | #bug-bounty | #web-security | #portswigger

283.

Responsible denial of service with web cache poisoning

research | 2019-11-14 14:52 | portswigger.net | original ↗ | #bug-bounty | #web-security | #portswigger

284.

Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty

blog | 2019-11-01 00:00 | samcurry.net | original ↗ | #bug-bounty | #fuzzing | #web-security

285.

YesWeHack & Alibaba Security Meetup challenge solution

blog | 2019-06-25 14:08 | yeswehack.com | original ↗ | #browser-security | #ctf | #web-security

286.

Bypassing CSP using polyglot JPEGs

research | 2019-06-14 12:15 | portswigger.net | original ↗ | #burp-suite | #web-security | #xss

287.

XSS in hidden input fields

research | 2019-06-14 12:03 | portswigger.net | original ↗ | #firefox | #web-security | #xss

288.

Noscript XSS filter bypass

research | 2019-06-14 12:00 | portswigger.net | original ↗ | #web-security | #javascript | #bypass

289.

Solution for “A Weird XSS Case”

vulnerability | 2019-04-01 13:47 | yeswehack.com | original ↗ | #ctf | #web-security | #xss

290.

What Application Developers Need To Know About TLS Early Data (0RTT)

blog | 2019-03-25 13:00 | blog.trailofbits.com | original ↗ | #web-security | #tls | #tls13

291.

Top 10 Web Hacking Techniques of 2017 - Voting Open

research | 2018-12-31 09:30 | portswigger.net | original ↗ | #web-security | #community | #research

292.

Reading ASP secrets for $17,000

blog | 2018-12-17 00:00 | samcurry.net | original ↗ | #bug-bounty | #web-security | #path-traversal

293.

Introducing the Hacker101 CTF

blog | 2018-09-10 15:00 | hackerone.com | original ↗ | #ctf | #web-security | #training

294.

Pesky Server Auth Issues We’ve Found

blog | 2018-08-10 10:23 | hackerone.com | original ↗ | #code-review | #web-security | #api-security

295.

The $12,000 Intersection between Clickjacking, XSS, and Denial of Service

vulnerability | 2018-07-04 00:00 | samcurry.net | original ↗ | #bug-bounty | #denial-of-service | #web-security

296.

How I accidentally framed myself for a hacking frenzy

research | 2018-04-23 15:25 | portswigger.net | original ↗ | #web-security | #portswigger | #tooling

297.

OWASP Top 10 Web Security Risks of 2017 - Flashcards

blog | 2018-03-07 17:00 | hackerone.com | original ↗ | #web-security | #education | #owasp

298.

Hacker101: Free class for web security. Let’s break some stuff

blog | 2018-01-24 19:00 | hackerone.com | original ↗ | #appsec | #web-security | #training

299.

blog | 2017-11-28 14:56 | portswigger.net | original ↗ | #web-security | #portswigger | #daily-swig

300.

Exploiting Directory Traversal to View Customer Credit Card Information on Yahoo's Small Business Platform

blog | 2017-11-10 00:00 | samcurry.net | original ↗ | #bug-bounty | #web-security | #pii

← Previous More →