Sebastian Lekies

@slekies

Tech Lead - Web Application Security Scanning

Zurich, Switzerland
Na Twitteri od október 2011
3 fotky a videá Fotky a videá

Tweety

Používateľ @slekies je zablokovaný

Naozaj chcete zobraziť tieto Tweety? Zobrazenie Tweetov neodblokuje @slekies.

  1. Pripnutý Tweet
    5. 1.

    The full list of CSP bypasses with all known vectors that came up during the recent discussions:

    131 Retweetov 152 Tweetov sa páčilo
  2. 19. 1.

    Advice to untangle cyber PR: If someone says "we got attacked X times" without exactly saying what "attack" means it's cyber-bullshit.

    7 Retweetov 14 Tweetov sa páčilo
  3. 18. 1.

    We keep hearing rumors that there'll be an ★Allstars 2017★ during OWASP AppSec EU in Belfast. Maybe there is something to it… cc

    7 Retweetov 11 Tweetov sa páčilo
  4. 17. 1.

    There are still free seats for my workshop about Inkscape in Zurich Please RT

    29 Retweetov 15 Tweetov sa páčilo
  5. 12. 1.

    And another CSP bypass by :

    1 reply 8 Retweetov 14 Tweetov sa páčilo
  6. 12. 1.

    How to write a research paper: a guide for software engineers & practitioners. /cc

    6 replies 112 Retweetov 247 Tweetov sa páčilo
  7. 10. 1.

    Remove DOM nodes without JavaScript: <svg><animate id=a dur=1 /><circle r=100> <discard begin=a.end xlink:href= /><style id=x>*{fill:red}

    60 Retweetov 146 Tweetov sa páčilo
  8. 7. 1.

    Another dangling markup vector:

    4 Retweety 13 Tweetov sa páčilo
  9. 7. 1.

    5 more CSP bypasses added to the list:

    5 Retweetov 18 Tweetov sa páčilo
  10. 6. 1.

    any additional ideas?

  11. 6. 1.

    Framework-specific bypasses are also welcome!

    1 Tweet sa páčil
  12. 6. 1.

    Added a few more CSP bypasses to the list. Happy to receive suggestions, ideas and PoCs. Just ping me.

    1 reply 7 Retweetov 12 Tweetov sa páčilo
  13. 5. 1.

    CC

    1 reply 1 Tweet sa páčil
  14. 5. 1.

    CSP-protected HTML injections can probably be used to break same-site cookies to conduct CSRF. (cc , , )

    2 Retweety 5 Tweetov sa páčilo
  15. 28. 12. 2016

    Are you ready for life outside the sandbox

    12 Retweetov 16 Tweetov sa páčilo
  16. 2. 1.

    Slightly surprised by how many ways there are to mutate HTML without JS! (by )

    5 Retweetov 31 Tweetov sa páčilo
  17. 1. 1.

    hah, my CSP nonce bypass:

    18 Retweetov 57 Tweetov sa páčilo
  18. 31. 12. 2016

    Another type of CSP nonce bypass. FF+Chrome. Works with traditional reflected XSS. Happy new year!

    6 replies 77 Retweetov 107 Tweetov sa páčilo
  19. Používateľ Sebastian Lekies začal sledovať , , and 4 others
    • Juan David Parra
      @nopbyte

    • Intent To Ship
      @intenttoship

      I tweet when browser makers announce their intent to ship, change or remove features in their web engines! I was made by .

  20. 29. 12. 2016

    and chrome too, soon!

    1 reply 2 Retweety 3 Tweety sa páčili

Používateľ @slekies zatiaľ netweetoval.

Načítavanie bude chvíľu trvať.

Twitter je preťažený alebo sa vyskytla neočakávaná chyba. Skúste to znova alebo navštívte stránku Twitter Status, ktorá obsahuje viac informácií.

    Môže sa vám páčiť aj

    ·