Rezultati pretraživanja
  1. 3. velj

    See-SURF - Based To Find Potential Parameters:

    5 proslijeđenih tweetova 11 korisnika označava da im se sviđa
  2. prije 23 sata

    "Mitigation can be difficult, but the best solutions depend on a variety of controls to help prevent issues from known and unknown SSRF vulnerabilities" Dan Ritter looks into the many faces of Server-Side Request Forgery () in his latest article ->

    2 proslijeđena tweeta 3 korisnika označavaju da im se sviđa
  3. 3. velj
    Odgovor korisniku/ci

    Damn, that's some great info on , thanks

    1 reply 1 korisnik označava da mu se sviđa
  4. 2. velj

    1 proslijeđeni tweet 2 korisnika označavaju da im se sviđa
  5. 29. sij

    Prediction: will make top 5 in the next

    One more: Find a subdomain such as <grafana>.corp.company.com which points to a external IP example however only accessible inside VPN and such SSRF could be leveraged in that way. You can often find such hosts over SSL. Have exploited such in pasts. Might even be a
    Prikaži ovu nit
    1 reply 1 korisnik označava da mu se sviđa
  6. 4. sij

    Write-ups ,

    1 reply 96 proslijeđenih tweetova 232 korisnika označavaju da im se sviđa
  7. 6. pro 2019.

    Published a short blogpost about how the introduction of affects attempts on instances, especially when attempting to retrieve information. cc:

    1 reply 45 proslijeđenih tweetova 73 korisnika označavaju da im se sviđa
  8. 25. stu 2019.

    Just exploited an issue to access (juicy) data; Some useful resources in case of needs: / /

    1 reply 117 proslijeđenih tweetova 269 korisnika označava da im se sviđa
  9. 15. stu 2019.

    Bypass if the WAF blocks exact file:///etc/passwd try file:///etc/./passwd

    95 proslijeđenih tweetova 246 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  10. 3. stu 2019.

    SSRF in Azure Devops

    1 reply 56 proslijeđenih tweetova 130 korisnika označava da im se sviđa
  11. 17. lis 2019.

    Some new tools and

    Server-Side Request Forgery Tools/Stuff
    56 proslijeđenih tweetova 138 korisnika označava da im se sviđa
  12. 7. lis 2019.

    A side from the old tricks to bypass 127.0.0.1 being blacklisted (i.e. 127.1, ::80, A record pointing to localhost etc). Have learned that INET_A(P)TON would consider any IP within the range of 127.0.0.1/8 the same as localhost i.e.~# curl 127.4.142.123

    127 proslijeđenih tweetova 388 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  13. 1. kol 2019.

    And some of you know my "simple-oob-scanner" tool, which I used to find some on Starbucks and other ressources. My private tool for this was also released some minutes ago:

    90 proslijeđenih tweetova 236 korisnika označava da im se sviđa
  14. 17. srp 2019.

    Pown-Duct - Essential Tool For Finding Blind Injection Attacks

    33 proslijeđena tweeta 69 korisnika označava da im se sviđa
  15. 18. tra 2019.

    Bypass filters by using http://127.1 instead of http://127.0.0.1 It resolves to the same but confuses filters blocking localhost/127.0.0.1 specifically!

    6 replies 163 proslijeđena tweeta 433 korisnika označavaju da im se sviđa
  16. 8. tra 2019.

    One more of my series "SSRF Tips"

    1 reply 57 proslijeđenih tweetova 131 korisnik označava da mu se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  17. 20. ožu 2019.

    Did you find the , but http://169.254.169.254/ is blacklisted? try http://0xA9FEA9FE/, http://0251.0376.0251.0376/ or get more examples from talk

    108 proslijeđenih tweetova 216 korisnika označava da im se sviđa
  18. 16. ožu 2019.

    Automatic SSRF fuzzer and exploitation tool

    80 proslijeđenih tweetova 157 korisnika označava da im se sviđa
  19. 16. ožu 2019.

    extension is almost done your modules are awesome man, I've used them 👾👾

    12 replies 53 proslijeđena tweeta 229 korisnika označava da im se sviđa
  20. 16. velj 2019.

    I just published $1.000 SSRF in Slack

    105 proslijeđenih tweetova 261 korisnik označava da mu se sviđa

Nema rezultata.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.