Read DevSecOps Weekly
DevSecOps Weekly Newsletter, Zeno. Curated DevSecOps news, tutorials, tools and more - Join thousands of other readers, 100% free, unsubscribe anytime.
Posts from the community tagged with information-technology...
Story
@tutorialboy24
shared a post, 2 years, 1 month ago
tut
Spring Actuator - Stealing Secrets Using Spring Actuators - Part 1:
Spring is a set of frameworks for developing Applications in Java. It is widely used, and so it is not unusual to encounter it during a security audit or penetration test. One of its features that I recently encountered during a Whitebox audit is actuators. In this series of articles, I will use the..
Story
@tutorialboy24
shared a post, 2 years, 1 month ago
tut
Turning cookie based XSS into account takeover
EpilogueI reported the exploitation scenario and was rewarded €500, as the impact was high. Be patient, don’t give up, and think out of the box. In this case, I used the company’s service to exploit the bug.Source :- https://tutorialboy24.blogspot.com/2022/09/turning-cookie-based-xss-into-account.ht..
