my tweets are severely limited by my lack of understanding of what I am doing.
Tim gets why Struts vuln from March was huge. You just write CMD=a-command-to-run.https://twitter.com/scalefree/status/908746076332707840 …
Pokaż ten wątek
-
WAF providers were generally slow with rules (and still largely very easy to bypass). Patching required app knowledge. Toxic mix.
Pokaż ten wątek
It's basically the IIS Unicode bug from late 90s. Defenders need to look at how simple but big flaws would play out, to plug gaps.
