|
You are here |
zhero-web-sec.github.io | ||
| | | | |
positive.security
|
|
| | | | | Using a still unpatched vulnerability in the PHP library dompdf (used for rendering PDFs from HTML), we achieved RCE on a web server with merely a reflected XSS vulnerability as entry point. | |
| | | | |
blog.kotowicz.net
|
|
| | | | | A blog on security, malware, cryptography, pentesting, javascript, php and whatnots | |
| | | | |
tom.vg
|
|
| | | | | [AI summary] This article discusses browser-based timing attacks that exploit side-channel information to infer resource sizes and user data, highlighting examples like social network group membership and defense mechanisms such as blocking third-party cookies. | |
| | | | |
adityarohilla.com
|
|
| | | This short post is written for recent graduates, current students and code newbies looking for a job as a Software Engineer in the Big N companies like Google, Facebook, Amazon, Netflix etc. I have personally tried most of the resources mentioned here (free and paid) during my job search. These have helped me to land... | ||