Nikhilvarun·Sep 17XSS, CSRF & Clickjacking: 3 Browser Attacks Every Beginner Should UnderstandHow Cross-Site Scripting (XSS) Actually Works
MainEkHacker·Sep 1Client side vulnerabilities that every hacker should knowThe major client-side vulnerability classes that come up constantly in web security work and everyone who start learning web security…
InInfoSec Write-upsbyMuhammad Nur Ibnu Hubab·Aug 29How I Turned Self-XSS into Reflected XSS (and Bypassed the WAF)Learn how I turned a restricted Self-XSS into a Reflected XSS vulnerability by bypassing WAF limits using CSRF.A response icon3A response icon3
Andrei·Jul 25Mitigating CSRF: How to Stop the Browser from Betraying the UserA user signs in to an administrative dashboard, opens another tab, and visits a seemingly harmless page. Hidden inside it is a form that…
Chwang·Jul 25【網路資安筆記】「只是按了個連結，錢就被轉走了？」一文搞懂前端兩大經典威脅 XSS 與 CSRF大家是否常常為了方便，讓瀏覽器自動「記住」各大平台的登入密碼呢？在追求便利的同時，是否曾經懷疑過這樣背後到底隱藏著什麼樣的安全風險？
InMeetCyberbyBash Overflow·Jul 9CSRF with Broken Referer Validation — Testing with Sonnet 4.6 (Medium Effort)Understanding and Exploiting Referer-Based Defense Bypasses.
Shadowbugbounty·Jul 1How I Solved Intigriti’s LeakyJar Challenge: One-click CSRF to Expose the Master Baker’s Private…Introduction
Dark Node·Jun 27How SameSite=Lax can be bypassed using GET requestsWe’ll see how to bypass “SameSite=Lax” restrictions using GET requests but first let’s get a breif about it.
Dark Node·Jun 19CSRF where token is tied on non-session cookieWhen we talk about CSRF (Cross site request forgery), what comes in our mind? Obviously, a website where unauthorized commands are…
