/explore
|
You are here 
|
blog.kotowicz.net | ||
| | | | |
blog.andlabs.org
Matt Austin made a brilliant discovery sometime back and wrote a detailed post of his hack, you absolutely must read it. Basically it is a... |
|
| | | | | ||
| | | | |
educatedguesswork.org
|
|
| | | | | ||
| | | | |
spawnzii.github.io
Introduction Hello, I'm currently a student at ESNA and I'm passionate about web application security. This article describes the discovery of several critical vulnerabilities in the SPIP CMS and Root-Me. With a friend (cc Abyss Watcher) we decided to search for vulnerabilities on the SPIP/Root-Me. From the first days, we managed to find some bugs, XSS, CSRF and later we will discover a RCE. Environment Of course we did not our research directly on root me. |
|
| | | | | ||
| | | | |
www.vlent.nl
[AI summary] The article explains that Django's Cross-site request forgery (CSRF) protection relies on a 'Double Submit Cookie' mechanism requiring both a cookie and a form parameter, and demonstrates how the validation works and why it prevents malicious requests. |
|
| | | |||
