Канал: BreaKTheHacK

Username enumeration via response timing

Username enumeration via response timing

Username enumeration via subtly different responses

Username enumeration via subtly different responses

Username enumeration via different responses

Username enumeration via different responses

Cross site WebSocket hijacking

Cross site WebSocket hijacking

Manipulating the WebSocket handshake to exploit vulnerabilities

Manipulating the WebSocket handshake to exploit vulnerabilities

Manipulating WebSocket messages to exploit vulnerabilities

Manipulating WebSocket messages to exploit vulnerabilities

Using PHAR deserialization to deploy a custom gadget chain

Using PHAR deserialization to deploy a custom gadget chain

Developing a custom gadget chain for PHP deserialization

Developing a custom gadget chain for PHP deserialization

Developing a custom gadget chain for Java deserialization

Developing a custom gadget chain for Java deserialization

Exploiting Ruby deserialization using a documented gadget chain

Exploiting Ruby deserialization using a documented gadget chain

Internal cache poisoning

Internal cache poisoning

URL normalization

URL normalization

Web cache poisoning via a fat GET request

Web cache poisoning via a fat GET request

Parameter cloaking

Parameter cloaking

How To Solve "Web cache poisoning via an unkeyed query parameter"

How To Solve "Web cache poisoning via an unkeyed query parameter"

Web cache poisoning via an unkeyed query string

Web cache poisoning via an unkeyed query string

Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria

Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria

Targeted web cache poisoning using an unknown header

Targeted web cache poisoning using an unknown header

Web cache poisoning with multiple header

Web cache poisoning with multiple header

Web cache poisoning with an unkeyed cookie

Web cache poisoning with an unkeyed cookie

Web cache poisoning with an unkeyed header

Web cache poisoning with an unkeyed header

Exploiting Java deserialization with Apache Commons

Exploiting Java deserialization with Apache Commons

Arbitrary object injection in PHP

Arbitrary object injection in PHP

Using application functionality to exploit insecure deserialization

Using application functionality to exploit insecure deserialization

Modifying serialized data types

Modifying serialized data types

Modifying serialized objects

Modifying serialized objects

Information disclosure in version control history

Information disclosure in version control history

Authentication bypass via information disclosure

Authentication bypass via information disclosure

Source code disclosure via backup files

Source code disclosure via backup files

Information disclosure on debug page

Information disclosure on debug page

Information disclosure in error messages

Information disclosure in error messages

Authentication bypass via encryption oracle

Authentication bypass via encryption oracle

infinite money logic flaw

infinite money logic flaw

Flawed enforcement of business rules

Flawed enforcement of business rules

Authentication bypass via flawed state machine

Authentication bypass via flawed state machine

Insufficient workflow validation

Insufficient workflow validation

Weak isolation on dual use endpoint

Weak isolation on dual use endpoint

Low-level logic flaw

Low-level logic flaw

Inconsistent handling of exceptional input

Inconsistent handling of exceptional input

Inconsistent security controls

Inconsistent security controls

High level logic vulnerability

High level logic vulnerability

Excessive trust in client-side controls

Excessive trust in client-side controls

SSRF via flawed request parsing

SSRF via flawed request parsing

Routing based SSRF

Routing based SSRF

Host header authentication bypass

Host header authentication bypass

Web cache poisoning via ambiguous requests

Web cache poisoning via ambiguous requests

Password reset poisoning via dangling markup

Password reset poisoning via dangling markup

Basic password reset poisoning

Basic password reset poisoning