Sebastian Lekies

@slekies

Tech Lead - Web Application Security Scanning

Zurich, Switzerland
Đã tham gia tháng 10 năm 2011
3 Ảnh và video Ảnh và video

Tweet

@slekies bị chặn

Bạn có chắc chắn muốn xem những Tweet này? Xem Tweet sẽ không bỏ chặn @slekies.

  1. Tweet đã ghim
    5 thg 1

    The full list of CSP bypasses with all known vectors that came up during the recent discussions:

    4 replies 131 tweet lại 152 thích
  2. 19 thg 1

    Advice to untangle cyber PR: If someone says "we got attacked X times" without exactly saying what "attack" means it's cyber-bullshit.

    2 replies 7 tweet lại 14 thích
  3. 18 thg 1

    We keep hearing rumors that there'll be an ★Allstars 2017★ during OWASP AppSec EU in Belfast. Maybe there is something to it… cc

    7 tweet lại 11 thích
  4. 17 thg 1

    There are still free seats for my workshop about Inkscape in Zurich Please RT

    29 tweet lại 15 thích
  5. 12 thg 1

    And another CSP bypass by :

    1 replies 8 tweet lại 14 thích
  6. 12 thg 1

    How to write a research paper: a guide for software engineers & practitioners. /cc

    6 replies 112 tweet lại 247 thích
  7. 10 thg 1

    Remove DOM nodes without JavaScript: <svg><animate id=a dur=1 /><circle r=100> <discard begin=a.end xlink:href= /><style id=x>*{fill:red}

    2 replies 60 tweet lại 146 thích
  8. 7 thg 1

    Another dangling markup vector:

    3 replies 4 tweet lại 13 thích
  9. 7 thg 1

    5 more CSP bypasses added to the list:

    5 tweet lại 18 thích
  10. 6 thg 1

    any additional ideas?

  11. 6 thg 1

    Framework-specific bypasses are also welcome!

    4 replies 1 thích
  12. 6 thg 1

    Added a few more CSP bypasses to the list. Happy to receive suggestions, ideas and PoCs. Just ping me.

    1 replies 7 tweet lại 12 thích
  13. 5 thg 1

    CC

    1 replies 1 thích
  14. 5 thg 1

    CSP-protected HTML injections can probably be used to break same-site cookies to conduct CSRF. (cc , , )

    2 replies 2 tweet lại 5 thích
  15. 28 thg 12, 2016

    Are you ready for life outside the sandbox

    12 tweet lại 16 thích
  16. 2 thg 1

    Slightly surprised by how many ways there are to mutate HTML without JS! (by )

    5 tweet lại 31 thích
  17. 1 thg 1

    hah, my CSP nonce bypass:

    3 replies 18 tweet lại 57 thích
  18. 31 thg 12, 2016

    Another type of CSP nonce bypass. FF+Chrome. Works with traditional reflected XSS. Happy new year!

    6 replies 77 tweet lại 107 thích
  19. Sebastian Lekies đã theo dõi , , and 4 others
    • Juan David Parra
      @nopbyte

    • Intent To Ship
      @intenttoship

      I tweet when browser makers announce their intent to ship, change or remove features in their web engines! I was made by .

  20. 29 thg 12, 2016

    and chrome too, soon!

    1 replies 2 tweet lại 3 thích

@slekies chưa Tweet.

Tải trang có vẻ sẽ mất một lúc.

Twitter có thể đang bị quá tải hoặc tạm thời trục trặc. Thử lại hoặc truy cập Trạng thái Twitter để biết thêm thông tin.

    Bạn cũng có thể thích

    ·