Abusing Linux Trust Relationships – Thotcon Talk
Had an awesome time presenting at Thotcon this year. I plan to expand on this topic quite a bit and eventually turn it into a…
Category: Mix
PortSwigginar – 22 June | Blog
Emma Stocks | 27 June 2022 at 14:44 UTC Thank you to those who attended our recent PortSwigginar on Burp Suite Enterprise Edition. Below is…
How To Pick Your Targets // How To Bug Bounty
How To Pick Your Targets // How To Bug Bounty Source link
Free Hacking APIs Course (APISEC University!)
Free Hacking APIs Course (APISEC University!) Source link
CORS Bypass via dot
Origin 헤더와 ACAO(Access-Control-Allow-Origin) 헤더는 Cross-Origin 관계에서 데이터를 전달하고 수신하기 위한 헤더로 SOP(Same-Origin Policy)를 공식적으로 우회하기 위한 헤더입니다. 일반적으로 CORS라고 통용되어 부르며, 이는 JSON Hijacking과 CSRF…
Ambassador Spotlight AWC Edition: remonsec
What made you want to become an ambassador? It was around 2017 when I started hacking. I suffered from misguidance and scams that were alleging…
Broken Link Hijacking – How expired links can be exploited
Broken Link Hijacking (BLH) exists whenever a target links to an expired domain or page. Broken Link Hijacking comes in two forms, reflected and stored.…
Detectify’s journey to an AWS multi-account strategy
In the past year, we’ve shifted our infrastructure from a single Amazon Web Services (AWS) account owned by our Platform team to multiple domain-specific accounts.…
Build your own serverless subscriber list with Go and AWS
How to build your own newsletter list with DynamoDB and SES email sign up confirmations. You can now subscribe to my email list on victoria.dev!…
Nahamsec interviews Jobert Abma
Note that during these interviews I also moderate thus quality may vary. Profile 🐝 cofounder HackerOne 29 years old started hacking at 11 years old…
How to prevent PHP type juggling vulnerabilities
How to prevent PHP type juggling vulnerabilities Source link
Yorkshire Post Building Demolition #3
Yorkshire Post Building Demolition #3 Source link