From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras - Varbaek/xsser

During the course of a penetration test, you may stumble upon a web server running WordPress.  WordPress is a highly popular CMS.  It runs on PHP, and is typically ran on top of a LAMP stack.  While most WordPress servers on the web are configured with strong…

Over the last few days, we've described how Burp's new crawler can deal with a wide variety of challenges presented by modern applications. But crawling applications is only part of the story. Th

Where to start with a whole domain at your fingertips?

IPFS consists of several innovations in communication protocols and distributed systems that have been combined to produce a file system like no other.

A demo simula um ataque web injection client-side consiste na criação de malwares que funcionam como uma espécie de proxy local possibilitando a modificação do conteúdos de resposta de determinadas requisições. Basicamente no momento que a requisição HTTP…

A golang ebook intro how to build a web with golang - astaxie/build-web-application-with-golang

Deep dive into the HTTP protocol, from a security perspective: understand HTTPS and HTTP verbs.

Acesse em https://blog.dsacademy.com.br

O mestre Tim Berners-Lee apresentou seu projeto Solid, que será uma web descentralizada, na qual os usuários terão controle sobre todos os seus dados.

I’ve always believed the web is for everyone. That’s why I and others fight fiercely to protect it. The changes we’ve managed to bring have…

Collection of social engineering payloads. Contribute to t3ntman/Social-Engineering-Payloads development by creating an account on GitHub.

by Alex Nadalin

Web Security: an introduction to HTTP
Photo by James Pond
[https://unsplash.com/photos/XO9uCZZaipE?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText]
on Unsplash
[https://unsplash.com/search/photos/security?utm_source=…

By Alex Nadalin This is part 2 of a series on web security: part 1 was “Understanding The Browser” HTTP is a thing of beauty: a protocol that has survived longer than 20 years without changing much. As we’ve seen in the previous article, browsers int...