#websecurity

87 posts

@portswigger_research WebSocket Turbo Intruder: Unearthing the WebSocket Goldmine #WebSecurity #CyberSecurity #VulnerabilityAnalysis
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406537
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406537
Don't have an account? Find a server at joinmastodon.org
Sep 17, 2025
@portswigger_research Cookie Chaos: How to bypass __Host and __Secure cookie prefixes #Cybersecurity #WebSecurity #Vulnerabilities
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406545
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406545
Don't have an account? Find a server at joinmastodon.org
Sep 3, 2025
@portswigger_research Inline Style Exfiltration: leaking data with chained CSS conditionals #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406554
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406554
Don't have an account? Find a server at joinmastodon.org
Aug 26, 2025
@portswigger_research Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling #WebSecurity #CyberSecurity #Networking
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406563
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406563
Don't have an account? Find a server at joinmastodon.org
Aug 19, 2025
@portswigger_research HTTP/1.1 must die: the desync endgame #WebSecurity #CyberSecurity #Networking
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406572
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406572
Don't have an account? Find a server at joinmastodon.org
Aug 6, 2025
@jesse_li Approve merge requests with your eyes closed #Programming #WebSecurity #DevOps
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/jesse_li/posts/22405697
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/jesse_li/posts/22405697
Don't have an account? Find a server at joinmastodon.org
Jul 27, 2025
@portswigger_research Repeater Strike: manual testing, amplified #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406580
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406580
Don't have an account? Find a server at joinmastodon.org
Jul 15, 2025
@sensepost Browser Cache Smuggling: the return of the dropper #CyberSecurity #OffensiveSecurity #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/sensepost/posts/22455741
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/sensepost/posts/22455741
Don't have an account? Find a server at joinmastodon.org
Mar 24, 2025
@portswigger_research Shadow Repeater:AI-enhanced manual testing #Cybersecurity #WebSecurity #AI
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406619
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406619
Don't have an account? Find a server at joinmastodon.org
Feb 20, 2025
@portswigger_research Top 10 web hacking techniques of 2024 #CyberSecurity #Hacking #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406629
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406629
Don't have an account? Find a server at joinmastodon.org
Feb 4, 2025
@portswigger_research Bypassing character blocklists with unicode overflows #WebSecurity #CyberSecurity #Vulnerabilities
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406639
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406639
Don't have an account? Find a server at joinmastodon.org
Jan 28, 2025
@portswigger_research Stealing HttpOnly cookies with the cookie sandwich technique #CyberSecurity #WebSecurity #Hacking
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406648
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406648
Don't have an account? Find a server at joinmastodon.org
Jan 22, 2025
@portswigger_research Bypassing WAFs with the phantom $Version cookie #WebSecurity #CyberSecurity #WAF
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406664
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406664
Don't have an account? Find a server at joinmastodon.org
Dec 4, 2024
@portswigger_research New crazy payloads in the URL Validation Bypass Cheat Sheet #CyberSecurity #WebSecurity #Vulnerabilities
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406672
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406672
Don't have an account? Find a server at joinmastodon.org
Oct 29, 2024
@portswigger_research Concealing payloads in URL credentials #Cybersecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406682
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406682
Don't have an account? Find a server at joinmastodon.org
Oct 23, 2024
@portswigger_research Introducing the URL validation bypass cheat sheet #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406693
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406693
Don't have an account? Find a server at joinmastodon.org
Sep 3, 2024
@portswigger_research Gotta cache 'em all: bending the rules of web cache exploitation #WebSecurity #CyberSecurity #Exploitation
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406701
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406701
Don't have an account? Find a server at joinmastodon.org
Aug 8, 2024
@portswigger_research Splitting the email atom: exploiting parsers to bypass access controls #Cybersecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406710
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406710
Don't have an account? Find a server at joinmastodon.org
Aug 7, 2024
@portswigger_research Listen to the whispers: web timing attacks that actually work #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406718
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406718
Don't have an account? Find a server at joinmastodon.org
Aug 7, 2024
@portswigger_research Fickle PDFs: exploiting browser rendering discrepancies #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406729
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406729
Don't have an account? Find a server at joinmastodon.org
Jul 9, 2024
@portswigger_research onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet #WebSecurity #CyberSecurity #XSS
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406753
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406753
Don't have an account? Find a server at joinmastodon.org
Jun 11, 2024
@portswigger_research Refining your HTTP perspective, with bambdas #WebSecurity #CyberSecurity #Research
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406761
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406761
Don't have an account? Find a server at joinmastodon.org
May 29, 2024
@portswigger_research Introducing SignSaboteur: forge signed web tokens with ease #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406773
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406773
Don't have an account? Find a server at joinmastodon.org
May 22, 2024
@security_stackexchange Why is a domain specified in a CSP default-src being reported as a script-src-elem violation? #CyberSecurity #WebSecurity #DevOps
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/security_stackexchange/posts/22395284
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/security_stackexchange/posts/22395284
Don't have an account? Find a server at joinmastodon.org
Apr 10, 2024
@portswigger_research Making desync attacks easy with TRACE #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406784
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406784
Don't have an account? Find a server at joinmastodon.org
Mar 19, 2024
@portswigger_research Using form hijacking to bypass CSP #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406793
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406793
Don't have an account? Find a server at joinmastodon.org
Mar 5, 2024
@portswigger_research Top 10 web hacking techniques of 2023 #CyberSecurity #Hacking #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406800
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406800
Don't have an account? Find a server at joinmastodon.org
Feb 19, 2024
@macs_tech_blog Stop deploying web application firewalls #Security #WebSecurity #Infrastructure
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/macs_tech_blog/posts/22437290
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/macs_tech_blog/posts/22437290
Don't have an account? Find a server at joinmastodon.org
Nov 11, 2023
@zhero_web_security A web cache deception chained to a CSRF, the recipe #WebSecurity #CyberSecurity #CTF
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/zhero_web_security/posts/22451498
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/zhero_web_security/posts/22451498
Don't have an account? Find a server at joinmastodon.org
Oct 25, 2023
@sensepost Browsers' cache smuggling #CyberSecurity #Hacking #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/sensepost/posts/22455985
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/sensepost/posts/22455985
Don't have an account? Find a server at joinmastodon.org
Jul 10, 2023
@zhero_web_security XSS Intigriti challenge 0523 #WebSecurity #CTF #XSS
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/zhero_web_security/posts/22451507
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/zhero_web_security/posts/22451507
Don't have an account? Find a server at joinmastodon.org
May 30, 2023
@zhero_web_security DOS via cache poisoning on Mozilla #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/zhero_web_security/posts/22451515
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/zhero_web_security/posts/22451515
Don't have an account? Find a server at joinmastodon.org
May 17, 2023
@kamran_ahmed Session Based Authentication #Authentication #WebSecurity #Programming
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/kamran_ahmed/posts/22432820
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/kamran_ahmed/posts/22432820
Don't have an account? Find a server at joinmastodon.org
Mar 23, 2023
@searchlight_labs Exploiting Static Site Generators: When Static Is Not Actually Static #Cybersecurity #Vulnerabilities #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/searchlight_labs/posts/22457180
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/searchlight_labs/posts/22457180
Don't have an account? Find a server at joinmastodon.org
Oct 28, 2022
@sensepost me vs request smugglingPOST #CyberSecurity #Hacking #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/sensepost/posts/22456120
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/sensepost/posts/22456120
Don't have an account? Find a server at joinmastodon.org
Jul 19, 2022
@jesse_li Ten seconds to ponder if a thread is worth it #Programming #WebSecurity #ReverseEngineering
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/jesse_li/posts/22405726
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/jesse_li/posts/22405726
Don't have an account? Find a server at joinmastodon.org
Mar 2, 2021
@christian_hascheks_blog The A1 Telekom Austria Hack - they came in through the web shells #Cybersecurity #Hacking #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/christian_hascheks_blog/posts/22385643
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/christian_hascheks_blog/posts/22385643
Don't have an account? Find a server at joinmastodon.org
Jun 8, 2020
@0day_work Open Redirects In Improperly Configured mod_rewrite Rules (PoC for CVE-2019-10098?) | 0day.work #Security #Vulnerability #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397972
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397972
Don't have an account? Find a server at joinmastodon.org
Oct 29, 2019
@0day_work Proof of Concept for "Apache Httpd Limited cross-site scripting in mod_proxy error page (CVE-2019-10092)" | 0day.work #Security #WebSecurity #CVE
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397988
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397988
Don't have an account? Find a server at joinmastodon.org
Oct 19, 2019
@andreas_happe Einführung in die Web-Security #WebSecurity #CyberSecurity #InfoSec
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/andreas_happe/posts/22457205
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/andreas_happe/posts/22457205
Don't have an account? Find a server at joinmastodon.org
Aug 30, 2019

« Newer Older »