
What functionalities are vulnerable to SSRFs? Case study of 124 bug bounty reports

Source link
Related Articles
All Mix →Bee-side 204 – COBOL Jobs Domain & Browser-Based Background Removal
Table of Contents New prompt injection research examines CIA security triad impacts. React+Vite tool enables client-side background removal. Developer shares insights monitoring COBOLJobs.com niche. Table…
Andreas Larsson, CTO/Lead Developer, Fakturabörsen: “Working with Detectify is a win-win situation!”
Fakturabörsen, one of Detectify’s very first customers, is a marketplace for invoices where companies can turn their invoices into capital. Andreas Larsson, CTO/Lead Developer, has…
Make Your Cybersecurity Dollars Last Longer
In my last blog, I examined why cybercrime increases during economic hardship and why innovation and vigilance are necessary to keep up. But how are…
Exploiting Improper Validation of Amazon Simple Notification Service SigningCertUrl
Note: This is the “text notes” version of my DEF CON 30 Cloud Village Lightning Talk. The talk was not recorded so this is the…
How I hacked Facebook and received a $3,500 USD Bug Bounty
Find out how our Security Researcher Frans Rosén hacked Facebook and found a stored XSS for which he received a bug bounty reward. I recently found…
What is Cross-site Scripting (XSS) and how can you fix it?
Table of Contents Cross-site scripting: What can happen? XSS Proof-of-Concept video: Example of Cross-site scripting (XSS) Cross-site scripting Remediation HTML Body HTML Attributes Untrusted URL GET…