Archive

Привет, хабр! Одним прекрасным вечером, не предвещающим ничего интересного, в наш чатик поступило предложение от автора публикации «Переводим в код 5...

H5SC - HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Posted by Chris Evans, Cookie Monster With the release of Flash 18.0.0.209 , two mitigations were introduced to combat abuse of Vector ...

CrowdShield | Create your bug bounty disclosure program and leverage ethical hackers from around the world!

H5SC - HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

More and more software vulnerabilities are discovered each year, and hundreds of public disclosures may occur on the same day. For example, the CVE …

Detecting XSS auditor James pointed out to me that XSS auditor in Chrome has a block mode and I thought it might be interesting to see if this could be exploited in some way. When the http header is s

NB: This blog post will be updated in the upcoming days with more information Introduction A few days before the publishing of this blog post I came across an unknown RTF exploit sample which I cou…

In Ming Loh has realised a new security note Firefox < 39.03 - pdf.js Same Origin Policy Exploit

NetFormation helps businesses navigate digital transformation via Level 3’s unique network with a focus on growth, efficiency, innovation and connections

sinkhole - Architectural privilege escalation on x86

Blue Frost has realised a new security note OpenSSH 6.9p1 Authentication Bypass / Use-After-Free

Intro

In a recent research project, Markus Wulftange of Code White discovered several critical vulnerabilities in the Symantec Endpoint Protection...

Doing an assessment and want to capture some hashes? Here's 10 methods you can try to get a user to authenticate to you over SMB.

Do you like strings? Do you like to find strings? How about in binary data? What about via regular expressions? ME TOO! bstrings works l...

Views