KacperSzurekEN

6:48

NGINX: misconfigurations examples

KacperSzurekEN

Shared 6 years ago

8K views

4:44

Kallithea - exploit git clone functionality

KacperSzurekEN

Shared 6 years ago

1.2K views

4:14

PHP PHAR - file_exists can be dangerous

KacperSzurekEN

Shared 6 years ago

3.9K views

4:08

SSH: How to login into multiple servers?

KacperSzurekEN

Shared 6 years ago

4.4K views

3:36

Spring Boot Actuator - security point of view

KacperSzurekEN

Shared 6 years ago

2.5K views

4:50

How to check account type using Burp Suite?

KacperSzurekEN

Shared 6 years ago

1.2K views

2:55

How to handle session expiration in BURP with macros?

KacperSzurekEN

Shared 6 years ago

8.4K views

4:16

[BURP] 12 tricks for Burp Repeater

KacperSzurekEN

Shared 6 years ago

5.5K views

6:01

XSS Polyglot

KacperSzurekEN

Shared 7 years ago

6.9K views

3:45

postMessage: exchange data between different domains

KacperSzurekEN

Shared 7 years ago

43K views

5:48

Cross-Site Websocket Hijacking

KacperSzurekEN

Shared 7 years ago

11K views

9:03

Don't use assert in PHP

KacperSzurekEN

Shared 7 years ago

2.5K views

4:42

Clickjacking: how to delete someone else's account?

KacperSzurekEN

Shared 7 years ago

23K views

4:12

Open redirection: can automatic redirection be harmful?

KacperSzurekEN

Shared 7 years ago

1.8K views

3:41

RFD: Reflected File Download

KacperSzurekEN

Shared 7 years ago

3.9K views

3:00

Excel: CSV Injection

KacperSzurekEN

Shared 7 years ago

16K views

3:43

Angular: XSS without HTML tags

KacperSzurekEN

Shared 7 years ago

6K views

3:42

Python: XSS using SVG file

KacperSzurekEN

Shared 7 years ago

3.6K views

3:16

PHP: escapeshellcmd vs escapeshellarg

KacperSzurekEN

Shared 7 years ago

2.2K views

3:22

Java: Random vs SecureRandom

KacperSzurekEN

Shared 7 years ago

6.2K views

2:46

YAML: code execution using !!python/object

KacperSzurekEN

Shared 7 years ago

14K views

3:20

Python SSTI: Attack Flask framework using Jinja2 template engine

KacperSzurekEN

Shared 7 years ago

8.6K views

3:21

PHP: Bypass filters using less-than sign

KacperSzurekEN

Shared 7 years ago

3.8K views

3:08

Unzip: how to properly extract files? Symlinks and zip

KacperSzurekEN

Shared 7 years ago

1.6K views

3:05

Java XXE: Read secret files when parsing XML files

KacperSzurekEN

Shared 7 years ago

2.8K views

2:58

Ruby: execute command using URL in open() function

KacperSzurekEN

Shared 7 years ago

1.7K views

2:41

Python 2: Why you shouldn’t use input function

KacperSzurekEN

Shared 7 years ago

1K views

14:04

How does Two-Factor Authentication - 2FA work?

KacperSzurekEN

Shared 7 years ago

21K views

8:56

Race condition and git hooks vs Gitea server

KacperSzurekEN

Shared 7 years ago

1K views

11:28

Steal messages from Signal using RCE, CVE-2018-10994 explanation

KacperSzurekEN

Shared 7 years ago

784 views

8:20

Best Black Hat 2018 and DEF CON 26 presentations - summary

KacperSzurekEN

Shared 7 years ago

240 views

11:46

4 common Node.js security issues inside NPM

KacperSzurekEN

Shared 7 years ago

1K views

7:06

How to create a Metasploit module in example

KacperSzurekEN

Shared 7 years ago

6.6K views

6:37

Best Black Hat 2018 and DEF CON 26 presentations - summary #2

KacperSzurekEN

Shared 7 years ago

183 views