infosecau 的提交内容

Gaining access to Uber's user data through AMPScript evaluation

Leveraging web application vulnerabilities to steal NTLM hashes

Commonspeak: Content discovery wordlists built with BigQuery

Breach Detection at Scale with PROJECT SPACECRAB

Exploiting Dolphin – Part 1

Taking Over DigitalOcean Domains via a Lax Domain Import System

SmashBot – An AI That Plays Super Smash Bros

Exploring the QNX shadowed password hash formats

Instagram's Million Dollar Bug

Severe bugs in 11 Indian startups worth $3B+ in a week

A survey of insecure Flash crossdomain policies

Abusing URL Shortners to discover sensitive resources or assets

Sonar – A Framework for Scanning and Exploiting Internal Hosts with a Webpage

What is in the first Ashley Madison leak?

Server-Side Template Injection: RCE for the Modern Web App [pdf]

Why You Want Two-Factor Authentication

Enumerating IPs in X-Forwarded-For Headers to Bypass 403 Restrictions

Getting into Linux Kernel Development

Stealing Lastpass Passwords with Clickjacking

CatpchaJacking: A new approach on bypassing the Captcha.