↧
Image may be NSFW.
Clik here to view.
Clik here to view.
Serving Back XML for XSS
In our “New ways I’m going to hack your web app” talk, one vulnerability example we had was with wordpress. There were three pieces to the attack 1) uploading an xsl file, 2) uploading an XML file that...
View Article
Image may be NSFW.
Clik here to view.
Clik here to view.
Some Interesting URI Parsing Quirks and Open Redirects
Parsing the “relativeness” of a URI seems to be a pretty browser specific thing, and doing some quick tests there are several quirks that might be useful/dangerous. The Tangled Web (which is an awesome...
View Article