SSRF vulnerabilities and where to find them
TL/DR: It’s no secret that cloud architectures have several characteristics that make SSRF attacks challenging to defend against. While SSRFs are not a new threat …
Ethical Hacking
How To Hack Web Applications in 2022: Part 2
TL/DR: Web applications have both authentication and authorization as key concepts and if bypassed by an attacker, it can compromise sensitive data. With threats such …
Module disclosures now available for hackers on Detectify Crowdsource
TL/DR: As part of ongoing efforts to enhance the experience of our community of ethical hackers on Crowdsource, Detectify announced today the availability of module …
Hack with ‘goodfaith’ – A tool to automate and scale good faith hacking
TL/DR: The tough part about hacking is to stay in scope. Hacker and security researcher Ryan Elkins (@ryanelkins) revealed a new tool that is intended to …
How To Hack Web Applications in 2022: Part 1
TL/DR: Web applications can be exploited to gain unauthorized access to sensitive data and web servers. Threats include SQL Injection, Code Injection, XSS, Defacement, and …
New tool release: Discovering the origin host to bypass web application firewalls
TL/DR: Crowdsource hacker Luke “hakluke” Stephens documents a tool for discovering the origin host behind a reverse proxy which is useful for bypassing WAFs and other …
CSP: bypassing form-action with reflected XSS
CSP (Content-Security-Policy) is an HTTP response header containing directives that instruct browsers how to restrict contents on a page. For instance, the “form-action” directive restricts what origins forms may be submitted to. The CSP form-action directive can limit which URLs the page may submit forms to. This protection can be bypassed in the case of an XSS/HTML injection bug.
Chrome Extensions – AKA Total Absence of Privacy
Popular Google Chrome extensions are constantly tracking you per default, making it very difficult or impossible for you to opt-out. These extensions will receive your complete browsing history, all your cookies, your secret access-tokens used for authentication (i.e., Facebook Connect) and shared links from sites such as Dropbox and Google Drive. The Detectify team has identified how they are doing it and what options you have to avoid being affected by it.