Modern Web Security: Essential Pentesting Techniques Hello again, I’m back after a bit of a break from blogging (only 6 years mind…... 2026-9-18 23:0:0 | 阅读: 5 | 收藏 | markitzeroday.com - markitzeroday.com injection security jwts frontend

XSS Hunting This post documents one of my findings from a bug bounty program. The program... 2020-3-3 16:55:22 | 阅读: 9 | 收藏 | markitzeroday.com - markitzeroday.com ffuf zelanguage zeroeditor rob dialog

Gaining Access to Card Data Using the Windows Domain to Bypass Firewalls This post details how to bypass firewalls to gain access to the Cardholder Dat... 2019-4-25 04:2:21 | 阅读: 11 | 收藏 | markitzeroday.com - markitzeroday.com network cde centre gpo

Password Autocomplete and Modern Browsers On many penetration test reports (including mine), the following is reported:... 2018-7-9 00:26:46 | 阅读: 8 | 收藏 | markitzeroday.com - markitzeroday.com attacker passwords entered grab

Defeating Content-Disposition The Content-Disposition response header tells the browser to download a file r... 2018-4-17 07:0:44 | 阅读: 10 | 收藏 | markitzeroday.com - markitzeroday.com download attachment gave mon thu

Defeating Content-Disposition The Content-Disposition response header tells the browser to download a file r... 2018-4-16 23:0:44 | 阅读: 0 | 收藏 | markitzeroday.com - markitzeroday.com download attachment gave nosniff sameorigin

Gaining Domain Admin from Outside Active Directory …or why you should ensure all Windows machines are domain joined.This is my... 2018-3-4 19:6:53 | 阅读: 12 | 收藏 | markitzeroday.com - markitzeroday.com cme machine windows responder netbios

How to Use X-XSS-Protection for Evil Two important headers that can mitigate XSS are: X-XSS-Protection Conten... 2018-2-11 03:33:31 | 阅读: 9 | 收藏 | markitzeroday.com - markitzeroday.com potato security auditor attacker specifying

Hidden XSS On a web test once I was having trouble finding any instances of cross-site sc... 2018-2-3 23:16:10 | 阅读: 12 | 收藏 | markitzeroday.com - markitzeroday.com rob wfuzz nikto osvdb 3092

ASP.NET Request Validation Bypass …and why you should report it (maybe).This post is regarding the .NET Reques... 2017-10-15 01:49:54 | 阅读: 9 | 收藏 | markitzeroday.com - markitzeroday.com quirks ie9 microsoft developer client

XSS Without Dots A site that I discovered was echoing everything on the query string and POST d... 2017-7-27 04:2:16 | 阅读: 19 | 收藏 | markitzeroday.com - markitzeroday.com php attacker gave 0csrc 2346

CSRF Mitigation for AJAX Requests To start with, a quick recap on what Cross-Site Request Forgery is: User i... 2017-6-29 19:34:52 | 阅读: 6 | 收藏 | markitzeroday.com - markitzeroday.com attacker victim security preflight burp