Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 34)

991.

Bypassing DOMPurify again with mutation XSS

research | 2020-10-07 15:02 | portswigger.net | Original ↗ | .md | #firefox | #web-security | #chrome

992.

Reducing Noise in Crowdsourced Security

research | 2020-10-07 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #vulnerability-management | #bugcrowd

993.

iOS Crackme: an efficient way to learn by doing

research | 2020-09-30 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #ios

994.

Breaking the chains on HTTP Request Smuggler

research | 2020-09-22 14:45 | portswigger.net | Original ↗ | .md | #burp-suite | #web-security | #portswigger

995.

Smartsheet Celebrates One Year with HackerOne

research | 2020-09-17 17:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #customer-story | #application-security

996.

Finding Hidden Files and Folders on IIS using BigQuery

research | 2020-09-18 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #recon | #content-discovery

997.

Hacking on Bug Bounties for Four Years

research | 2020-09-15 00:00 | slcyber.io | Original ↗ | .md | #bug-bounty | #vulnerability-research | #methodology

998.

‘I thought it was a complete fluke’ – Katie Paxton-Fear on her bug bounty baptism and why AI will never fully replace security researchers

research | 2020-09-11 14:02 | portswigger.net | Original ↗ | .md | #ai-security | #bug-bounty | #education

999.

Examining the August Smart Lock

research | 2020-09-09 22:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #iot | #ble

1000.

When alert fails: exploiting transient events

research | 2020-09-08 12:27 | portswigger.net | Original ↗ | .md | #web-security | #xss | #waf-bypass

1001.

XS-Leak: Detecting IDs using Portal

research | 2020-09-08 12:26 | portswigger.net | Original ↗ | .md | #browser-security | #portswigger | #side-channel

1002.

Escaping JavaScript sandboxes with parsing issues

research | 2020-09-08 12:26 | portswigger.net | Original ↗ | .md | #fuzzing | #web-security | #sandbox-escape

1003.

Bypassing AngularJS bind HTML

research | 2020-09-08 12:23 | portswigger.net | Original ↗ | .md | #xss | #portswigger | #cors

1004.

SVG animate XSS vector

research | 2020-09-08 12:22 | portswigger.net | Original ↗ | .md | #browser-security | #web-security | #xss

1005.

JavaScript without parentheses using DOMMatrix

research | 2020-09-08 10:00 | portswigger.net | Original ↗ | .md | #xss | #portswigger | #javascript

1006.

Top 10 web hacking techniques of 2019 - nominations open

research | 2020-09-07 13:49 | portswigger.net | Original ↗ | .md | #web-security | #community | #research

1007.

One XSS cheatsheet to rule them all

research | 2020-09-04 14:33 | portswigger.net | Original ↗ | .md | #browser-security | #xss | #portswigger

1008.

Bypassing CSP with policy injection

research | 2020-09-04 14:31 | portswigger.net | Original ↗ | .md | #bug-bounty | #portswigger | #chrome

1009.

Top 10 web hacking techniques of 2018 - nominations open

research | 2020-09-04 14:23 | portswigger.net | Original ↗ | .md | #web-security | #community | #research

1010.

IDA Pro Tips to Add to Your Bag of Tricks

research | 2020-09-03 13:41 | swarm.ptsecurity.com | Original ↗ | .md | #reverse-engineering | #tooling | #tips

1011.

Grafana 6.4.3 Arbitrary File Read

research | 2020-08-27 15:07 | CVE-2019-19499 | swarm.ptsecurity.com | Original ↗ | .md | #vulnerability-research | #cve | #mysql

1012.

Atlassian’s CISO tells the story of his journey from hacker to security executive

research | 2020-08-26 00:00 | bugcrowd.com | Original ↗ | .md | #security-leadership | #bugcrowd | #crowdsourced-security

1013.

Kerberoasting without SPNs

research | 2020-08-19 14:26 | swarm.ptsecurity.com | Original ↗ | .md | #pentesting | #active-directory | #kerberos

1014.

Introduction to Whiteboxes and Collision-Based Attacks With QBDI

research | 2020-08-17 22:00 | blog.quarkslab.com | Original ↗ | .md | #cryptography | #reverse-engineering | #aes

1015.

Vulnerabilities in the Openfire Admin Console

research | 2020-08-04 14:16 | swarm.ptsecurity.com | Original ↗ | .md | #vulnerability-research | #cve | #ssrf

1016.

Why are Frida and QBDI a Great Blend on Android?

research | 2020-08-03 22:00 | blog.quarkslab.com | Original ↗ | .md | #android | #reverse-engineering | #tracing

1017.

Hacker Spotlight: Interview with cdl

research | 2020-07-31 16:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #cve | #hacker-spotlight

1018.

Attacking MS Exchange Web Interfaces

research | 2020-07-23 01:00 | swarm.ptsecurity.com | Original ↗ | .md | #pentesting | #vulnerability-research | #active-directory

1019.

Attacking and defending JavaScript sandboxes

research | 2020-07-16 10:39 | portswigger.net | Original ↗ | .md | #web-security | #sandbox-escape | #proxy

1020.

DOM Clobbering strikes back

research | 2020-07-07 10:31 | portswigger.net | Original ↗ | .md | #browser-security | #xss | #research

← Previous More →