Collaborate Disseminate
im looking to allow a previously GET request of a url like:
myurl.com/site/id/1 where the value 1 in this case – is a pseudo random and not too difficult to guess.
I’m looking to bring this id/1 key/value into my request BOD… Continue reading Https POST Request for POST Parameters
I am wondering if anyone know’s of a DAST Scanner than can either take in an authenticated request from somewhere like burp, OR some DAST software that takes username and password and then run DAST scans against the target.
I’ve used a t… Continue reading Dynamic Application Security Testing (DAST) Scanner for Post Authentication [closed]
Hi all Im trying to understand how the billion laughs attack works(https://en.wikipedia.org/wiki/Billion_laughs_attack)
So far I get its obviously sending this payload:
<?xml version=”1.0″?>
<!DOCTYPE lolz [
<… Continue reading Billion Laughs Attack (XXE) – how does it work
I am doing some “non-nefarious” testing for my own knowledge and want to disable the login page for DVWA (http://www.dvwa.co.uk/)
The login page includes code that should be modified, and I found this post about this very t… Continue reading Disable login page for DVWA [on hold]
Does anyone know how to hack dvwa(http://www.dvwa.co.uk) via submitting a form input like ../../../../../etc/passwd to expose the /etc/passwd of a given server?
Is there a endpoint to hit for this?
Thanks
I am trying to brainstorm how I might either:
1) create a protocol (although against this option)
2) use an existing protocol
That does the following:
1) allows 1 way communication from 1 node to another.
2) Provides (hig… Continue reading One way protocol with encryption without tcp