Search: portswigger.net | Heykuki News

HK

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

31.

WordPress security plugin Hide My WP addresses SQL injection, deactivation flaws

portswigger.net

5 years ago

75 points

32.

HTTP Desync Attacks: Request Smuggling Reborn

portswigger.net

7 years ago

75 points

33.

Critical Samba flaw presents code execution threat

portswigger.net

4 years ago

74 points

34.

Web App Hacker's Handbook 2nd Edition - Preview

blog.portswigger.net

15 years ago

70 points

35.

CSP bypass: How one Chrome XSS bug took 2.5 years and an HTML spec change to fix

portswigger.net

5 years ago

67 points

36.

DNA data of sexual assault victims exposed in breach at US laboratory

portswigger.net

4 years ago

63 points

37.

Expired web domains help criminal hackers unlock enterprise defenses

portswigger.net

5 years ago

60 points

38.

Lessons Learned: A severe vulnerability in the OWASP ModSecurity Core Rule Set

portswigger.net

5 years ago

55 points

39.

Chain of vulnerabilities led to RCE on Cisco Prime servers

portswigger.net

4 years ago

48 points

40.

Same-origin violation vulnerability in Safari 15 could leak a user’s website

portswigger.net

4 years ago

47 points

41.

Bypassing CSP using polyglot JPEGs

blog.portswigger.net

10 years ago

43 points

42.

HTTP/1.1 must die: the desync endgame

portswigger.net

10 months ago

42 points

43.

Node.js was vulnerable to a novel HTTP request smuggling technique

portswigger.net

5 years ago

39 points

44.

Google Project Zero hails dramatic acceleration in security bug remediation

portswigger.net

4 years ago

36 points

45.

Cracking the Lens: Targeting HTTP's Hidden Attack-Surface

blog.portswigger.net

9 years ago

36 points

46.

Go typosquatting package relays info to tech firm

portswigger.net

5 years ago

32 points

47.

Implementing Tic Tac Toe with 170mb of HTML – No JavaScript or CSS

portswigger.net

3 years ago

31 points

48.

Prototype Pollution (2020)

portswigger.net

5 years ago

31 points

49.

Chrome is deprecating direct access to private networks from public websites

portswigger.net

4 years ago

27 points

50.

API security: Broken access controls, injection attacks plague the enterprise

portswigger.net

4 years ago

25 points

51.

Stealing passwords from infosec Mastodon – without bypassing CSP

portswigger.net

4 years ago

20 points

52.

Popular websites leaking user email data to web tracking domains

portswigger.net

4 years ago

19 points

53.

SnapFuzz: New fuzzing tool speeds up testing of network applications

portswigger.net

4 years ago

18 points

54.

Detecting and exploiting path-relative stylesheet import vulnerabilities

blog.portswigger.net

11 years ago

18 points

55.

HTTP/1.1 must die: the desync endgame

portswigger.net

a year ago

17 points

56.

Pip-audit: Google-backed tool probes Python environments for vulnerable packages

portswigger.net

5 years ago

15 points

57.

Implementing Tic Tac Toe with 170mb of HTML – No JavaScript or CSS

portswigger.net

3 years ago

13 points

58.

Connecticut becomes fifth US state to enact comprehensive consumer privacy law

portswigger.net

4 years ago

12 points

59.

Van Buren appeal arguments in light of Computer Fraud and Abuse Act ambiguity

portswigger.net

6 years ago

DyslexicAtheist

12 points

60.

GoDaddy managed WordPress hosting service breach exposed 1.2m user profiles

portswigger.net

5 years ago

11 points