While browsing a SharePoint instance recently, I came across an interesting URL. The page itself displayed a web form that submitted data to SharePoint. Intrigued by the .xsn extension, I downloade...
Introduction Our Web Security Academy has a topic on dangling markup injection - a technique for exploiting sites protected by CSP. But something interesting happened when we came to update to Chrome
Description This bug could allow a malicious actor to takeover a Facebook account after stealing a Gmail OAuth id_token/code used<p>Continue readingMultiple bugs chained to takeover Facebook ...
Do you ever wonder about the vulnerabilities you’ve missed? Why didn’t they show themselves - and will they be discovered by somebody else later? Certain vulnerabilities have a knack for evading au...
Transition based events without style blocks So, recently, I was updating our XSS cheat sheet to fix certain vectors that had been made obsolete by browser updates. Whilst looking at the vectors, the
There are a bunch of different terms here, all with slightly different meanings: Remote Code Execution Remote Command Execution Code Injection Command Injection RCE These subtle differences have ca...
Summary After publishing the write-ups about the bugs i previously found in Facebook Games Platform ( Canvas ), i thought<p>Continue readingMore secure Facebook Canvas Part 2: More Account Ta...
How often do you find yourself running scans that take ages to complete? How often do you cancel a scan because it has been taking too long? But what if you left it to run for 3 more minutes? Would...
Welcome to the Top 10 (new) Web Hacking Techniques of 2021, the latest iteration of our annual community-powered effort to identify the most significant web security research released in the last y...
This post is a writeup about CVE-2022-21703, which is the result of a collaborative effort between bug-bounty hunter abrahack and me. If you use or intend to use Grafana, you should at least read t...