Novel idea to bypass WAF bit.ly/2KFyuY4

How a Persistent XSS vulnerability can lead to Remote Code Execution #PHP #appsec rips.tech/flatcore

Huge thanks to everyone who visited our #hackerspace during these past 2 days 🙌 We had a real blast at #hackit2018! Big props to Yaroslav Babin, SaxX ¯\_(ツ)_/¯, Johnyy Dream and every single hacker that took part in our CTF 🔥

Here is a zero-day RCE crafted from a tricky XXE, affecting millions of users on NetGear Stora, SeaGate Home, & Medion LifeCloud NAS: paulosyibelo.com/2018/11/zero-d…

Uber disclosed a bug submitted by mdv: hackerone.com/reports/256152 - Bounty: $6,000 #hackerone #bugbounty

Uber disclosed a bug submitted by mdv: hackerone.com/reports/217739 - Bounty: $6,000 #hackerone #bugbounty

If you want to know the name of inside-site s3 bucket - just put %c0 into url

lfi in http header ¯\_(ツ)_/¯

Hacking thousands of websites via third-party JavaScript libraries dmsec.io/hacking-thousa…

Some general rate limiting and WAF protections can be bypassed using the Google Bot user-agent Mozilla/5.0 (compatible; Googlebot/2.1; +google.com/bot.html)

Very impressed with reading State of Software Security: Open Source Libraries Report by Veracode: veracode.com/sites/default/…

How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM (slides inside) blog.orange.tw/2020/09/how-i-… #HITCON

I am announcing the Geckon project, a mass scanning tool that will make your testing more efficient. Stay tuned. kisoro.com/blog/geckon-pr…

My prototype exploit gains access to any nearby iPhone’s memory in just a few seconds; imagine launching the exploit from a drone flying across a protest...

site:codepad.co "company" site:scribd.com "company" site:npmjs.com "company" site:npm.runkit.com "company" site:libraries.io "company" site:ycombinator.com "company" site:coggle.it "company" 1/3

Russians hit the sarcophagus of the Chornobyl nuclear power plant. This is a peace signal. Putin simply wants peace. Look, russia is for peace. Peace, isn't it clear?