Collaborate Disseminate
Find out how you can monitor the deployment of an Azure JSON template using the Azure Portal and debug what went wrong using errors in the Azure Portal and the Azure Resource Explorer.
The post Monitoring & Troubleshooting Azure JSON Deployments appeared first on Petri.
Continue reading Monitoring & Troubleshooting Azure JSON Deployments
Deploy an Azure JSON template from the Azure Portal using the (still in preview) Templates feature.
The post Deploying JSON Templates Using the Azure Portal appeared first on Petri.
Continue reading Deploying JSON Templates Using the Azure Portal
I am testing a scenario with Burp proxy.
I am located on a website https://website.com/web
There’s an option there to delete an item, when you click it , a certain POST request is sent (XMLHttpRequest, no page refresh is ha… Continue reading Reflected XSS via JSON executed with Burp, but how to do it in realistic conditions?
I am testing a scenario with Burp proxy.
I am located on a website https://website.com/web
There’s an option there to delete an item, when you click it , a certain POST request is sent (XMLHttpRequest, no page refresh is ha… Continue reading Reflected XSS via JSON executed with Burp, but how to do it in realistic conditions?
I am testing a scenario with Burp proxy.
I am located on a website https://website.com/web
There’s an option there to delete an item, when you click it , a certain POST request is sent (XMLHttpRequest, no page refresh is ha… Continue reading Reflected XSS via JSON executed with Burp, but how to do it in realistic conditions?
In the book “XSS Attacks – Exploits and Defense” Jeremiah Grossman writes:
The exploit found in Google’s reader was due to the developers thinking that JSON was only going to be viewed by the calling script.The developers… Continue reading XSS from JSON outputs
In the book “XSS Attacks – Exploits and Defense” Jeremiah Grossman writes:
The exploit found in Google’s reader was due to the developers thinking that JSON was only going to be viewed by the calling script.The developers never realized that attackers could send users directly to the JSON output. While AJAX and JSON do not generally introduce new holes per se, they definitely can increase the attacker’s surface area.
I thing there is no way for the attacker to force victim’s browser to run javascript from JSON directly. Is there any example that shows the authors intended purpose?
I’m a summer intern turned full time employee. To make a long story short, the lead developer of the project I interned on quit, and since I’m the only other person that knows the project I got hired full time to maintain it…. Continue reading Any reason to send a user a session salt?
Find out how to deploy a JSON template in Azure using PowerShell and a parameters JSON file.
The post Deploying a JSON Template in Azure Using a Parameters File appeared first on Petri.
Continue reading Deploying a JSON Template in Azure Using a Parameters File
Find out how to deploy a JSON template in Azure using PowerShell and a parameters JSON file.
The post Deploying a JSON Template in Azure Using a Parameters File appeared first on Petri.
Continue reading Deploying a JSON Template in Azure Using a Parameters File