Curated security research, vulnerabilities, advisories and tools for practitioners.

#web-security

Security coverage tagged web-security. (Page 11)

301.

How-To: Find IDOR (Insecure Direct Object Reference) Vulnerabilities for Large Bounty Rewards

blog | 2017-11-09 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #burp-suite | #web-security

302.

Is CORS Becoming Obsolete?

blog | 2017-09-06 00:00 | bishopfox.com | original ↗ | #browser-security | #web-security | #w3c

303.

How To: Command Injections

vulnerability | 2017-07-07 14:00 | hackerone.com | original ↗ | #rce | #ruby | #web-security

304.

How To: Server-Side Request Forgery (SSRF)

vulnerability | 2017-06-14 18:00 | hackerone.com | original ↗ | #ruby | #web-security | #tutorial

305.

How I could've taken over the production server of a Yahoo acquisition through command injection

blog | 2017-06-04 00:00 | samcurry.net | original ↗ | #bug-bounty | #rce | #reconnaissance

306.

Eradicating image authentication injection from the entire internet

blog | 2017-05-10 00:00 | samcurry.net | original ↗ | #bug-bounty | #browser-security | #web-security

307.

Getting Started – Bug Bounty Hunter Methodology

research | 2017-02-02 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #bugcrowd

308.

Q&A With PortSwigger's James Kettle: Bug Bounties, Exploit Stories, and More!

blog | 2017-01-19 16:30 | hackerone.com | original ↗ | #bug-bounty | #burp-suite | #web-security

309.

How To Hunt For Injection Vulnerabilities' OR 1='1

vulnerability | 2016-07-21 17:57 | hackerone.com | original ↗ | #bug-bounty | #sql-injection | #web-security

310.

Researcher Spotlight: Nijagaw

blog | 2016-04-15 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #pentesting | #web-security

311.

Let’s Encrypt the Internet

blog | 2016-01-05 12:50 | blog.trailofbits.com | original ↗ | #web-security | #privacy | #tls

312.

Researcher Spotlight: Jared Perry

blog | 2015-12-14 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #burp-suite | #web-security

313.

Researcher Spotlight: Darkarnium

blog | 2015-11-30 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #bugcrowd

314.

Introducing the RubySec Field Guide

blog | 2015-06-08 11:50 | blog.trailofbits.com | original ↗ | #ruby | #fuzzing | #secure-coding

315.

Vulnerable by Design: Understanding Server-Side Request Forgery

research | 2015-04-18 00:00 | bishopfox.com | original ↗ | #web-security | #research | #ssrf

316.

Authentication Bypass

vulnerability | 2013-08-19 00:00 | bugcrowd.com | original ↗ | #pentesting | #burp-suite | #authentication-bypass

317.

MDSec online training labs

blog | 2011-09-20 13:23 | portswigger.net | original ↗ | #cloud | #web-security | #learning

318.

Web App Hacker's Handbook 2nd Edition - Preview

blog | 2011-05-11 10:01 | portswigger.net | original ↗ | #web-security | #preview | #books

319.

Web Application Hacker's Handbook - Live Edition

blog | 2010-04-16 15:37 | portswigger.net | original ↗ | #black-hat | #web-security | #training

320.

[MoBP] Intelligent MIME type recognition

blog | 2008-11-11 07:03 | portswigger.net | original ↗ | #burp-suite | #web-security | #proxy

321.

The Month of Burp Pr0n

blog | 2008-11-01 10:48 | portswigger.net | original ↗ | #burp-suite | #web-security | #portswigger

322.

Attacking parameter names

blog | 2008-08-22 07:26 | portswigger.net | original ↗ | #sql-injection | #web-security | #penetration-testing

323.

Null byte attacks are alive and well

blog | 2008-05-05 13:10 | portswigger.net | original ↗ | #java | #web-security | #input-validation

324.

XSRF and threat ratings

blog | 2008-03-20 19:16 | portswigger.net | original ↗ | #sql-injection | #web-security | #penetration-testing

325.

Book review: Ajax Security

blog | 2008-03-14 08:10 | portswigger.net | original ↗ | #web-security | #portswigger | #ajax

326.

When good XSRF defence turns bad

blog | 2008-01-06 11:44 | portswigger.net | original ↗ | #web-security | #csrf | #xsrf

327.

Burp Suite v1.1 released

blog | 2007-12-09 17:05 | portswigger.net | original ↗ | #burp-suite | #web-security | #portswigger

328.

Hacker's Handbook - online materials

blog | 2007-11-06 21:14 | portswigger.net | original ↗ | #web-security | #portswigger | #books

329.

blog | 2007-10-22 21:23 | portswigger.net | original ↗ | #web-security | #portswigger | #teaser

330.

Hacker's Handbook - table of contents

blog | 2007-09-12 08:53 | portswigger.net | original ↗ | #web-security | #portswigger | #books

← Previous More →