KacperSzurekEN

NGINX misconfigurations examples

KacperSzurekEN

Kallithea - exploit git clone functionality

KacperSzurekEN

PHP PHAR - file_exists can be dangerous

KacperSzurekEN

SSH How to login into multiple servers

KacperSzurekEN

Spring Boot Actuator - security point of view

KacperSzurekEN

How to check account type using Burp Suite

KacperSzurekEN

How to handle session expiration in BURP with macros

KacperSzurekEN

[BURP] 12 tricks for Burp Repeater

KacperSzurekEN

XSS Polyglot

KacperSzurekEN

postMessage exchange data between different domains

KacperSzurekEN

Cross-Site Websocket Hijacking

KacperSzurekEN

Don't use assert in PHP

KacperSzurekEN

Clickjacking how to delete someone else's account

KacperSzurekEN

Open redirection can automatic redirection be harmful

KacperSzurekEN

RFD Reflected File Download

KacperSzurekEN

Excel CSV Injection

KacperSzurekEN

Angular XSS without HTML tags

KacperSzurekEN

Python XSS using SVG file

KacperSzurekEN

PHP escapeshellcmd vs escapeshellarg

KacperSzurekEN

Java Random vs SecureRandom

KacperSzurekEN

YAML code execution using !!pythonobject

KacperSzurekEN

Python SSTI Attack Flask framework using Jinja2 template engine

KacperSzurekEN

PHP Bypass filters using less-than sign

KacperSzurekEN

Unzip how to properly extract files Symlinks and zip

KacperSzurekEN

Java XXE Read secret files when parsing XML files

KacperSzurekEN

Ruby execute command using URL in open() function

KacperSzurekEN

Python 2 Why you shouldn’t use input function

KacperSzurekEN

How does Two-Factor Authentication - 2FA work

KacperSzurekEN

Race condition and git hooks vs Gitea server

KacperSzurekEN

Steal messages from Signal using RCE, CVE-2018-10994 explanation

KacperSzurekEN