04 2021 档案

Reflected XSS protected by CSP, with CSP bypass
该文被密码保护。
posted @ 2021-04-30 22:12 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS protected by very strict CSP, with dangling markup attack
该文被密码保护。
posted @ 2021-04-30 21:53 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS protected by CSP, with dangling markup attack
该文被密码保护。
posted @ 2021-04-30 21:45 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Content security policy
该文被密码保护。
posted @ 2021-04-30 18:41 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS with AngularJS sandbox escape and CSP
该文被密码保护。
posted @ 2021-04-30 12:53 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS with AngularJS sandbox escape without strings
该文被密码保护。
posted @ 2021-04-30 12:40 enjoy_jun 阅读(0) 评论(0) 推荐(0)
AngularJS sandbox
该文被密码保护。
posted @ 2021-04-30 12:13 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped
该文被密码保护。
posted @ 2021-04-29 19:32 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Stored XSS into onclick event with angle brackets and double quotes HTML-encoded ang single quotes and backslash escaped
该文被密码保护。
posted @ 2021-04-29 19:12 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS in a JavaScript URL with some characters blocked
该文被密码保护。
posted @ 2021-04-29 18:17 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped
该文被密码保护。
posted @ 2021-04-29 18:08 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS into a JavaScript string with angle brackets HTML encoded
该文被密码保护。
posted @ 2021-04-29 16:43 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS into a JavaScript string with single quote and backslash escaped
该文被密码保护。
posted @ 2021-04-29 16:14 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS in canonical link tag
该文被密码保护。
posted @ 2021-04-29 13:46 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Stored XSS into anchor href attribute with double quotes HTML-encoded
该文被密码保护。
posted @ 2021-04-29 12:44 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS into attribute with angle brackets HTML-encoded
该文被密码保护。
posted @ 2021-04-29 12:07 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS with some SVG markup allowed
该文被密码保护。
posted @ 2021-04-28 17:25 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS with event handlers and href attributes blocked
该文被密码保护。
posted @ 2021-04-27 22:33 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS into HTML context with all tags blocked except custom ones
该文被密码保护。
posted @ 2021-04-27 17:38 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS into HTML context with most tags and attributes blocked
该文被密码保护。
posted @ 2021-04-26 21:14 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Cross-site scripting contexts
该文被密码保护。
posted @ 2021-04-26 15:54 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Exploiting XSS to perform CSRF
该文被密码保护。
posted @ 2021-04-25 21:51 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Exploiting cross-site scripting to capture passwords
该文被密码保护。
posted @ 2021-04-25 20:19 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Exploiting cross-site scripting to steal cookies
该文被密码保护。
posted @ 2021-04-25 18:17 enjoy_jun 阅读(0) 评论(0) 推荐(0)
nginx利用request_body记录POST body(location中用proxy_pass)
摘要：1.完整过程 1.1 在nginx.conf中http里面添加配置如下: http { ... log_format postdata escape=json '$remote_addr - $remote_user [$time_local] "$request" '$status $body_b 阅读全文
posted @ 2021-04-25 11:06 enjoy_jun 阅读(5718) 评论(0) 推荐(0)
Exploiting cross-site scripting vulnerabilities
该文被密码保护。
posted @ 2021-04-24 20:28 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Stored DOM XSS
该文被密码保护。
posted @ 2021-04-24 17:27 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected DOM XSS
该文被密码保护。
posted @ 2021-04-24 11:41 enjoy_jun 阅读(0) 评论(0) 推荐(0)
DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded
该文被密码保护。
posted @ 2021-04-24 11:32 enjoy_jun 阅读(0) 评论(0) 推荐(0)
DOM XSS in jQuery anchor href attribute sink using location.search source
该文被密码保护。
posted @ 2021-04-23 21:31 enjoy_jun 阅读(0) 评论(0) 推荐(0)
DOM XSS in innerHTML sink using source location.search
该文被密码保护。
posted @ 2021-04-23 16:50 enjoy_jun 阅读(0) 评论(0) 推荐(0)
DOM XSS in document.write sink using source location.search inside a select element
该文被密码保护。
posted @ 2021-04-23 11:19 enjoy_jun 阅读(0) 评论(0) 推荐(0)
DOM XSS in document.write sink using source location.search
该文被密码保护。
posted @ 2021-04-22 23:41 enjoy_jun 阅读(0) 评论(0) 推荐(0)
DOM-based XSS介绍
该文被密码保护。
posted @ 2021-04-20 05:31 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Stored XSS into HTML context with nothing encoded
该文被密码保护。
posted @ 2021-04-20 05:14 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Stored XSS
该文被密码保护。
posted @ 2021-04-19 22:44 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS into HTML context with nothing encoded
该文被密码保护。
posted @ 2021-04-19 21:33 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Reflected XSS
该文被密码保护。
posted @ 2021-04-18 21:50 enjoy_jun 阅读(0) 评论(0) 推荐(0)
XSS介绍
该文被密码保护。
posted @ 2021-04-17 22:10 enjoy_jun 阅读(0) 评论(0) 推荐(0)
将时间戳(timestamp)转换为具体的日期(date)格式(On Linux)
摘要：1.时间戳是秒的情况 命令如下: date -d @timestamp 例子: date -d @1618632469 得到结果如下： Sat 17 Apr 2021 12:07:49 AM EDT 2.时间戳是毫秒的情况 2.1 方法一 命令如下： awk '{print strftime("%c 阅读全文
posted @ 2021-04-17 12:42 enjoy_jun 阅读(5299) 评论(0) 推荐(0)
Password brute-force via password change
该文被密码保护。
posted @ 2021-04-16 18:11 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Password reset poisoning via middleware
该文被密码保护。
posted @ 2021-04-16 17:32 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Password reset broken logic
该文被密码保护。
posted @ 2021-04-16 13:56 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Offline password cracking
该文被密码保护。
posted @ 2021-04-16 11:39 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Brute-forcing a stay-logged-in cookie
该文被密码保护。
posted @ 2021-04-15 23:10 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Vulnerabilities in other authentication mechanisms
该文被密码保护。
posted @ 2021-04-15 18:42 enjoy_jun 阅读(0) 评论(0) 推荐(0)
2FA bypass using a brute-force attack
该文被密码保护。
posted @ 2021-04-15 15:45 enjoy_jun 阅读(0) 评论(0) 推荐(0)
2FA broken logic
该文被密码保护。
posted @ 2021-04-15 12:54 enjoy_jun 阅读(0) 评论(0) 推荐(0)
2FA simple bypass
该文被密码保护。
posted @ 2021-04-15 12:40 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Vulnerabilities in multi-factor authentication
该文被密码保护。
posted @ 2021-04-15 12:05 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Broken brute-force protection, multiple credentials per request
该文被密码保护。
posted @ 2021-04-15 11:27 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Username enumeration via account lock
该文被密码保护。
posted @ 2021-04-14 22:28 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Broken brute-force protection, IP block
该文被密码保护。
posted @ 2021-04-14 17:33 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Username enumeration via response timing
该文被密码保护。
posted @ 2021-04-14 13:54 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Username enumeration via subtly different responses
该文被密码保护。
posted @ 2021-04-14 13:00 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Username enumeration via different responses
该文被密码保护。
posted @ 2021-04-14 11:26 enjoy_jun 阅读(0) 评论(0) 推荐(0)
username list
该文被密码保护。
posted @ 2021-04-14 10:18 enjoy_jun 阅读(0) 评论(0) 推荐(0)
password list
该文被密码保护。
posted @ 2021-04-14 10:16 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Vulnerabilities in password-based login
该文被密码保护。
posted @ 2021-04-13 20:51 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Authentication介绍
该文被密码保护。
posted @ 2021-04-13 19:12 enjoy_jun 阅读(0) 评论(0) 推荐(0)
电脑启动后自动进入BIOS可能的解决办法(技嘉(GIGABYTE)主板)
摘要：电脑启动后自动电脑启动后自动进入BIOS可能原因是，BIOS里面的CSM Support给Disabled掉了， 把CSM Support给Enabled(即开启)，然后重新安装系统即可。 我的情况是我把CSM Support给Enabled(即开启)，没有重新安装系统，就开启系统遇到如下问题： R 阅读全文
posted @ 2021-04-12 13:21 enjoy_jun 阅读(11797) 评论(0) 推荐(0)
Stealing OAuth access tokens via a proxy page
该文被密码保护。
posted @ 2021-04-10 09:43 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Stealing OAuth access tokens via an open redirect
该文被密码保护。
posted @ 2021-04-09 17:02 enjoy_jun 阅读(0) 评论(0) 推荐(0)
OAuth account hijacking via redirect_uri
该文被密码保护。
posted @ 2021-04-09 12:26 enjoy_jun 阅读(0) 评论(0) 推荐(0)
CSRF with broken Referer validation
该文被密码保护。
posted @ 2021-04-08 21:21 enjoy_jun 阅读(0) 评论(0) 推荐(0)
CSRF where Refere validation depends on header being present
该文被密码保护。
posted @ 2021-04-08 17:53 enjoy_jun 阅读(6) 评论(0) 推荐(0)
CSRF where token is duplicated in cookie
该文被密码保护。
posted @ 2021-04-08 17:22 enjoy_jun 阅读(0) 评论(0) 推荐(0)
CSRF where token is tied to non-session cookie
该文被密码保护。
posted @ 2021-04-08 11:19 enjoy_jun 阅读(0) 评论(0) 推荐(0)
CSRF where token is not tied to user session
该文被密码保护。
posted @ 2021-04-08 10:56 enjoy_jun 阅读(0) 评论(0) 推荐(0)
CSRF where token validation depends on token being present
该文被密码保护。
posted @ 2021-04-07 20:03 enjoy_jun 阅读(0) 评论(0) 推荐(0)
CSRF where token validation depends on request method
该文被密码保护。
posted @ 2021-04-07 19:51 enjoy_jun 阅读(0) 评论(0) 推荐(0)
CSRF vulnerability with no defenses
该文被密码保护。
posted @ 2021-04-07 19:27 enjoy_jun 阅读(0) 评论(0) 推荐(0)
CSRF介绍
该文被密码保护。
posted @ 2021-04-07 12:48 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Motivational Documentaries or movies base on real stories
该文被密码保护。
posted @ 2021-04-06 16:51 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Forced OAuth profile linking
该文被密码保护。
posted @ 2021-04-06 16:34 enjoy_jun 阅读(0) 评论(0) 推荐(0)
Authentication bypass via OAuth implicit flow
该文被密码保护。
posted @ 2021-04-06 11:44 enjoy_jun 阅读(0) 评论(0) 推荐(0)