Here I share web links that I find interesting:
This year's Links
2023
-
Beginner’s Guide To OSCP 2023
Penetration TestingHackingPrerequisiteNewcomersOffsecCertificationsOSCP
2022
-
Insecure Deserialization - How to trace down a gadget chain - Other examples in Ruby
Web Application SecurityWeb Security AcademyLabsInsecure DeserializationRemote Code ExecutionGadget ChainsRuby
-
Insecure Deserialization - How to trace down a gadget chain
Web Application SecurityInsecure DeserializationRemote Code ExecutionGadget ChainsPHP
-
Cross-site WebSocket hijacking (CSWSH)
Web Application SecurityWeb Security AcademyWebsocketsCross-Site Request ForgeryCSRF
-
Hide Malicious Shell in Image File
Web Application SecurityWeb Security AcademyLabsFile Upload VulnerabilitiesMalicious MetadataExiftool
-
COEP COOP CORP CORS CORB... that's a lot of new stuff!
WebHTTPWeb ApplicationsWeb Application SecurityHTTP HeadersSecurity Headers
-
TED Talk: Your Can Grow New Brain Cells. Here is How
NeuroscienceNeurogenesisPerformance Improvement