90202 подписчиков
152 видео
Prototype Pollution: DOM XSS via client-side prototype pollution
Prototype Pollution: Client-side prototype pollution via flawed sanitization
Squid/AWS-Quick Proxy Set Up - EP4 - Set A Proxy Server ENV (environment) Variable Side On Linux
Squid/AWS-Quick Proxy Set Up - EP1 - How to set up a Proxy Server on AWS - Special100 Subscriptions
Insecure Deserialization:Lab #3- Using application functionality to exploit insecure deserialization
Squid/AWS-Quick Proxy Set Up - EP2 - Blocking Website And Custom IP Address
Insecure Deserialization:Lab #4 - Arbitrary object injection in PHP
JSON Web Token Attacks: LAB #3 By PortSwigger - JWT Authentication Bypass Via Weak Signing Key
How To Set Up SSH Key For GitHub
Insecure Deserialization: Lab #8: Developing a custom gadget chain for Java deserialization
How To Troubleshoot SELinux Policies With Httpd Port And Files
Squid/AWS-Quick Proxy Set Up - EP3 - Proxy Chain Set Up Two Hops
How to learn API penetration testing FREE for bug bounty beginners
Insecure Deserialization vulnerabilities: Lab #2 by PortSwigger - Modifying Serialized Data Types
Prototype Pollution: Client-side prototype pollution in third-party libraries
Insecure Deserialization vulnerabilities: Lab #1 by PortSwigger - Modifying Serialized Objects
Netcat and all his secret: How to set up a chat between two computers
How To Set Proxy Chains On Kali Linux
JSON Web Token Attacks: LAB #6 - JWT Authentication Bypass Via kid Header Path Trasversal
GraphQL API Vulnerabilities: Accessing private GraphQL posts
Insecure Deserialization vulnerabilities: 10 Using PHAR deserialization to deploy a custom gadget
How I Mastered Web Hacking with eWPTx Certification
JSON Web Token Attacks:LAB#8 - JWT Authentication Bypass Via Algorithm Confusing With No Exposed Key
Race Conditions: Partial construction race conditions
Prototype Pollution: DOM XSS via an alternative prototype pollution vector
Insecure Deserialization:Lab #5 - Exploiting Java deserialization with Apache Commons
CTF Walkthrough: CTF-101 by Snyk, Bypassing Python Unicode Parsing
JSON Web Token Attacks: LAB #7 - JWT Authentication Bypass Via Algorithm Confusing
GraphQL API Vulnerabilities: Bypassing GraphQL brute force protections
How To Install DVWA - Damn Vulnerable Web App And Brute Force Login Page With Hydra
Insecure Deserialization: Lab #9: Developing a custom gadget chain for PHP deserialization
Race Conditions: Bypassing rate limits via race conditions
Quick Logger Server set up in PHP with ngrook
JSON Web Token Attacks: LAB #1 by PortSwigger - JWT Authentication Bypass Via Unverified Signature
Race Conditions: Limit overrun race condition
JSON Web Token Attacks: LAB #2 - JWT Authentication Bypass Via Flawed Signature Verification
BEWARE OF DOCM FILES - Episode 1: Introduction to Malicious DOCM Files
Race Conditions: Multi-endpoint race conditions
