How To Hack Web Applications in 2022: Part 2
TL/DR: Web applications have both authentication and authorization as key concepts and if bypassed by an attacker, it can compromise sensitive data. With threats such …
XSS
Account hijacking using “dirty dancing” in sign-in OAuth-flows
TL;DR Combining response-type switching, invalid state and redirect-uri quirks using OAuth, with third-party javascript-inclusions has multiple vulnerable scenarios where authorization codes or tokens could leak to an attacker. This could be used in attacks for single-click account takeovers. Frans Rosén, Security Advisor at Detectify goes through three different scenarios found in the wild below.
How To Hack Web Applications in 2022: Part 1
TL/DR: Web applications can be exploited to gain unauthorized access to sensitive data and web servers. Threats include SQL Injection, Code Injection, XSS, Defacement, and …
CVE-2020-29653: Stealing Froxlor login credentials using dangling markup
This is a guest blog from Detectify Crowdsource ethical hacker, Valerio Brussani aka Val_brux. Detectify collaborates with the Crowdsource community to source the latest security …
Scratching the surface of host headers in Safari
Scratching the surface of host headers in Safari
Dissecting the Chrome Extension Facebook malware
TL;DR The Facebook malware that spread last week was dissected in a collaboration with Kaspersky Labs and Detectify. We were able to get help from the involved companies and cloud services to quickly shut down parts of the attack to mitigate it as fast as possible.
How we invented the Tesla DOM DOOM XSS
Many have seen the video where vexal modifies his Porsche 911 to run DOOM. It is the same guy who used a toaster to control a PC game a few years ago. How technically accurate these videos are can be discussed, but the underlying creativity is hard to question. Naturally, when we saw the video, we did not want to lag behind, but what is the best way to respond to something like this? Inventing the DOM DOOM XSS, of course!
A deep dive into AWS S3 access controls – taking full control over your assets
TL;DR: Setting up access control of AWS S3 consists of multiple levels each with its own unique risk of misconfiguration. We will go through the specifics of each level and identify the dangerous cases where weak ACLs can create vulnerable configurations impacting the owner of the S3-bucket and/or through third party assets used by a lot of companies. We also show how to do it properly and how to monitor for these sorts of issues.