BrainiacBug retweeted
Researchers asked 43 freelance developers to code the user registration for a web app and assessed how they implemented password storage. 26 devs initially chose to leave passwords as plaintext. [PDF] net.cs.uni-bonn.de/fileadmin…
BrainiacBug retweeted
This is how I break down and differentiate the various types of security assessment—from auditing to va to pentest to red team.
danielmiessler.com/study/sec… #infosec
BrainiacBug retweeted
All-male line-ups suck, sure. We would all love to have a more diverse set of speakers.
But I’m not a fan of forcing it by accepting speakers mainly because of their gender rather than technical quality.
This just drives the bias that any female speaker is a quota woman.
BrainiacBug retweeted
21 things you can do with XSS, by @s0md3v : bit.ly/2RW9D6L
Just in case one still believes XSS is benign (and apparently some do...)
BrainiacBug retweeted
Breaking Mews: Just when you thought it was going to be routine Monday night 2 am server maintenance... The Venison Red Team gets past your fancy guards and biometrics.
Posted with permission. #Pentesting #redteam
BrainiacBug retweeted
We've developed a new attack on WPA/WPA2. There's no more complete 4-way handshake recording required. Here's all details and tools you need: hashcat.net/forum/thread-771…
BrainiacBug retweeted
Show a browser notification instead of an alert box!
But it requires user permission... #XSS
Notification.requestPermission(x=>{new(Notification)(1)})
If user already authorized the target site to send notifications this is enough: new(Notification)(1)
brutelogic.com.br/xss.php?c3…
BrainiacBug retweeted
Don't Trust All SSL/TLS Certificates, a nice writeup about certificates as unexpected XSS vector...
bit.ly/2jRCu99
BrainiacBug retweeted
Abusing RFC-1342 to spoof email addresses and inject XSS (in some cases). Quite interesting indeed !
bit.ly/2nsW3ck
By @pwnsdx
BrainiacBug retweeted
"Software and cathedrals are much the same: first we build them, then we pray." - Anonymous
BrainiacBug retweeted
Kali Revealed, now live and free. Come train with us. offs.ec/2vGKRZu | offs.ec/2vGwtR0
BrainiacBug retweeted
I am very happy to announce that we found the first SHA1 collision - security.googleblog.com/2017… … #security #TLS #SHA1 #SHAttered
BrainiacBug retweeted
Nice ! Turning self-XSS into good-XSS part 2 by @emgeekboy
bit.ly/2k65bRK
BrainiacBug retweeted
SQL injections vulnerabilities in Stack Overflow PHP questions : laurent22.github.io/so-injec…