Common Open Redirection Bug Bounty Mistakes
Source link
Related Articles
All Mix →
CAPTCHA does not prevent cross-site request forgery (CSRF)
Table of Contents About CAPTCHA To understand why CAPTCHA does not guarantee CSRF protection, let’s look at how it works: Google reCAPTCHA In our dialogues…
My Current Thoughts on Gun Control
Like many others, I’ve been in a number of debates about gun control in recent weeks. Here are my main thoughts on the topic: The…
How an MFA Bypass Led to Account Takeover [Plus 11 Authentication Tips]
Table of Contents Many Facets, One Goal Multi-factor Authentication (MFA) An Example of an MFA Bypass Vulnerability Steps to Reproduce Protecting Against MFA Attacks Brute-forcible…
The Hidden Gems Of The Burp Suite Settings [April 2023 version]
The Hidden Gems Of The Burp Suite Settings [April 2023 version] Source link
Vuln of the Month: CVE-2020-10148 SolarWinds Orion Authentication Bypass
Every week, our global community of hand-picked Detectify Crowdsource ethical hackers submit new vulnerabilities that we make available to our users as automated security tests.…
Moving to a new domain without breaking old links with AWS & Disqus
I moved my site’s blog to its own domain without breaking old links or losing comments. Here’s how. I started blogging about my nomadic travels…