Curated security research, vulnerabilities, advisories and tools for practitioners.

#web-security

Security coverage tagged web-security. (Page 9)

241.

uBlock, I exfiltrate: exploiting ad blockers with CSS

research | 2021-12-07 12:15 | portswigger.net | original ↗ | #web-security | #css-injection | #ublock-origin

242.

CATIE Web - Version 20.04.0

blog | 2021-12-02 00:00 | bishopfox.com | original ↗ | #web-security | #information-disclosure | #vulnerability

243.

Burp Suite Professional: feature roundup

blog | 2021-09-30 13:39 | portswigger.net | original ↗ | #web-security | #burp-suite-professional | #http2

244.

Introduction to postMessage() Vulnerabilities

blog | 2021-08-25 14:52 | yeswehack.com | original ↗ | #bug-bounty | #browser-security | #web-security

245.

blog | 2021-08-13 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #idor

246.

LEXSS: Bypassing Lexical Parsing Security Controls

vulnerability | 2021-06-22 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #vulnerability

247.

Welcome to the Caido Blog!

blog | 2021-06-26 00:00 | caido.io | original ↗ | #web-security | #caido | #beta

248.

File Upload Attacks (Part 2)

blog | 2021-06-16 15:18 | yeswehack.com | original ↗ | #bug-bounty | #rce | #web-security

249.

Froala Editor, Version 3.2.6 Advisory

vulnerability | 2021-06-02 00:00 | CVE-2021-28114 | bishopfox.com | original ↗ | #web-security | #xss | #vulnerability

250.

File Upload Attacks (Part 1)

blog | 2021-05-12 15:22 | yeswehack.com | original ↗ | #bug-bounty | #rce | #denial-of-service

251.

Recorded logins in Burp Scanner

blog | 2021-04-22 13:32 | portswigger.net | original ↗ | #product-update | #web-security | #authentication

252.

The Rise of IDOR

blog | 2021-04-02 15:00 | hackerone.com | original ↗ | #access-control | #web-security | #idor

253.

DOJO CHALLENGE #8 Winners!

blog | 2021-03-29 09:01 | yeswehack.com | original ↗ | #ctf | #web-security | #dojo

254.

The Ultimate Guide to Finding and Escalating XSS Bugs

vulnerability | 2021-03-25 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #xss

255.

PimpMyBurp #3 – AutoRepeater: add automation to your beautiful hunter life

vulnerability | 2021-03-10 13:35 | yeswehack.com | original ↗ | #bug-bounty | #burp-suite | #automation

256.

Top 10 web hacking techniques of 2020

research | 2021-02-26 09:53 | portswigger.net | original ↗ | #web-security | #top-10 | #research-roundup

257.

How to Find XXE Bugs: Severe, Missed and Misunderstood

vulnerability | 2021-02-19 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #rce | #web-security

258.

What are AppSec leaders prioritizing in 2021? The survey results are in

blog | 2021-02-18 15:28 | portswigger.net | original ↗ | #appsec | #devsecops | #web-security

259.

Web Storage: the lesser evil for session tokens

research | 2021-02-01 11:33 | portswigger.net | original ↗ | #web-security | #cookies | #session-tokens

260.

Top 10 Web Hacking Techniques of 2017

research | 2021-01-05 14:10 | portswigger.net | original ↗ | #cloud | #web-security | #research

261.

Top 10 web hacking techniques of 2018

research | 2021-01-05 14:10 | portswigger.net | original ↗ | #web-security | #wordpress | #research

262.

Top 10 web hacking techniques of 2019

research | 2021-01-05 14:10 | portswigger.net | original ↗ | #bug-bounty | #web-security | #http-desync

263.

DOJO CHALLENGE #6 Winners!

vulnerability | 2020-12-22 11:11 | yeswehack.com | original ↗ | #ctf | #sql-injection | #web-security

264.

DOJO CHALLENGE #2 Winners!

blog | 2020-11-17 13:30 | yeswehack.com | original ↗ | #ctf | #sql-injection | #web-security

265.

Bypassing DOMPurify again with mutation XSS

research | 2020-10-07 15:02 | portswigger.net | original ↗ | #firefox | #web-security | #chrome

266.

Hacker Spotlight: Interview with albinowax

vulnerability | 2020-10-02 13:00 | hackerone.com | original ↗ | #burp-suite | #web-security | #request-smuggling

267.

Breaking the chains on HTTP Request Smuggler

research | 2020-09-22 14:45 | portswigger.net | original ↗ | #burp-suite | #web-security | #portswigger

268.

When alert fails: exploiting transient events

research | 2020-09-08 12:27 | portswigger.net | original ↗ | #web-security | #xss | #waf-bypass

269.

Escaping JavaScript sandboxes with parsing issues

research | 2020-09-08 12:26 | portswigger.net | original ↗ | #fuzzing | #web-security | #sandbox-escape

270.

SVG animate XSS vector

research | 2020-09-08 12:22 | portswigger.net | original ↗ | #browser-security | #web-security | #xss

← Previous More →