Showing posts with label csrf. Show all posts
Showing posts with label csrf. Show all posts
Monday, May 25, 2015

[Service Workers] New APIs = New Vulns = Fun++

›
Just came back from another great HackPra Allstars , this time in the beautiful city of Amsterdam. Mario was kind enough to invite me to ...
Tuesday, August 04, 2009

Our Favorite XSS Filters and how to Attack them

›
So well, Black Hat 2009 and DEFCON 17 are over now, and on Black Hat I presented twice, so I want to do a quick recap. If you asisted to ...
Tuesday, October 21, 2008

About CSS Attacks

›
Gareth , David and I went to Microsoft Bluehat v8 , it was pretty fun meeting everyone. Gareth described the talk pretty well in here: ht...
Monday, December 24, 2007

Making a Social Network XSS Worm (hi5.com)

›
Well, the last couple of days I've been playing with hi5. It's pretty cool, and I found a couple of XSS vulnerabilities. I reported ...
Thursday, November 08, 2007

Inside History of hacking rsnake for fun and pagerank.

›
Well the research made for the exploit for the joke for rsnake is sort of interesting, so I'll try to explain what was needed (even do i...
Saturday, October 13, 2007

Vulns of Google that where, and are not?

›
Well, this are the bugs at Google services that even do are fixed now, where around for a while. First I have to say that the Google Securit...
Friday, September 28, 2007

Google Mashups Vulnerability

›
yay, I wanted to be part of this hell of a week (Google's Dark Week). Here is the vulnerability I reported to google, and it appears ...
Thursday, August 23, 2007

SHA-1 Collision Search Graz XSS and CSRF

›
A couple of days ago, at elhacker.net , they showed a project, for finding SHA-1 collisions. After I registered, I found out that there was ...