↓ Skip to main content

Tags

62 tags across 25 posts, grouped by what kind of thing they are

Vulnerability classes

Information disclosure6 Stored XSS6 Reflected XSS5 File upload4 Exposed credentials3 RCE3 Default credentials2 Privilege escalation2 Business logic flaw1 DOM XSS1 HTTP parameter pollution1 JNDI injection1 Open redirect1 Path traversal1 Self-XSS1 SQL injection1

Techniques

Context breakout4 img onerror4 Filter bypass3 Subdomain enumeration3 Attribute injection2 Port scanning2 Second-order delivery2 URL parsing2 Anti-debugging1 Certificate pinning bypass1 Lookalike domain1 Netblock enumeration1 Parser differential1 Phishing1 Screenshotting1 SSH brute force1 URL fragment1 XHTML namespace1

Technologies and tools

Burp Suite2 Apache Tomcat2 WordPress2 AI1 Aquatone1 binwalk1 Frida1 GDB1 JFFS21 John the Ripper1 Jolokia1 Kippo1 LLDB1 phpinfo()1 Spotlight1 XML1

Platforms

Linux3 Java2 macOS2 PHP2 Android1 iOS1

Disclosure and practice

Vendor response4 Coordinated disclosure3 CERT coordination1 Government websites1 Honeypot1 Opinion1