கீச்சுகள்
- கீச்சுகள்
- ட்விட்கள் & பதில்கள்
- ஊடகம்
@slekies தடை செய்யப்பட்டுள்ளது
நிச்சயமாக இந்தக் கீச்சுகளைக் காண விரும்புகிறீர்களா? கீச்சுகளைக் காண்பது @slekies-ஐத் தடைநீக்காது.
-
பின்செய்த ட்விட்
The full list of CSP bypasses with all known vectors that came up during the recent discussions: http://sebastian-lekies.de/csp/bypasses.php …
-
Advice to untangle cyber PR: If someone says "we got attacked X times" without exactly saying what "attack" means it's cyber-bullshit.
-
We keep hearing rumors that there'll be an ★Allstars 2017★ during OWASP AppSec EU in Belfast. Maybe there is something to it… cc
@AppSecEU -
There are still free seats for my workshop about Inkscape in Zurich
#inkange https://www.eventbrite.com/e/ange-albertini-binary-poster-workshop-tickets-29729953090 … Please RTpic.twitter.com/aOfc0rE8a9
-
How to write a research paper: a guide for software engineers & practitioners. https://docs.google.com/presentation/d/1LGcM3Jmd5ZkoYfn1Bph4W4-lYQD0lDnrtOKe3IpTiAs/edit?usp=sharing … /cc
@inwyrd -
Remove DOM nodes without JavaScript: <svg><animate id=a dur=1 /><circle r=100> <discard begin=a.end xlink:href=
#x /><style id=x>*{fill:red} -
5 more CSP bypasses added to the list: http://sebastian-lekies.de/csp/bypasses.php …
-
any additional ideas?
@0x6D6172696F@kkotowicz@garethheyes -
Framework-specific bypasses are also welcome!
-
Added a few more CSP bypasses to the list. Happy to receive suggestions, ideas and PoCs. Just ping me. http://sebastian-lekies.de/csp/bypasses.php …
-
CSP-protected HTML injections can probably be used to break same-site cookies to conduct CSRF. (cc
@sirdarckcat,@mikewest,@arturjanc) -
Are you ready for life outside the
#Angular sandbox@cigital@synopsyshttps://blogs.synopsys.com/software-integrity/2016/12/28/angularjs-1-6-0-sandbox/ … -
Slightly surprised by how many ways there are to mutate HTML without JS! https://sirdarckcat.github.io/csp/attlist.xml (by
@0x6D6172696F http://html5sec.org/#67 ) -
@sirdarckcat hah, my CSP nonce bypass: https://jsbin.com/vigodiqifo/ -
Another type of CSP nonce bypass. FF+Chrome. Works with traditional reflected XSS. http://sirdarckcat.github.io/csp/fakexss.html … Happy new year!
-
Sebastian Lekies பின்தொடர்ந்தார் Juan David Parra, Intent To Ship, Enrico Mrass and 4 others
-
@intenttoship
I tweet when browser makers announce their intent to ship, change or remove features in their web engines! I was made by
@dietrich.
Sebastian Lekies
hanno
Cure53
杏
Michael Eder
Adrienne Porter Felt
.mario
Lewis Ardern
Eduardo Vela
长短短
சுமையேற்ற அதிக நேரமெடுக்கிறது போல் தெரிகிறது.
Twitter -இல் அதிக கொள்ளளவு அல்லது தற்காலிக சிக்கல் ஒன்று ஏற்பட்டிருக்கலாம். மீண்டும் முயற்சிக்கவும் அல்லது மேலும் தகவலுக்கு Twitter நிலை என்பதைப் பார்க்கவும்.