Daniel's user avatar
Daniel's user avatar
Daniel's user avatar
Daniel
  • Member for 11 years, 9 months
  • Last seen more than a month ago
53 votes
6 answers
24k views

Does injecting querystring values directly into HTML pose a security risk?

16 votes
2 answers
5k views

Why does this XSS vector work in svg but not in HTML?

13 votes
3 answers
11k views

How can I find websites owned by a particular company?

11 votes
1 answer
13k views

How zip symlink works?

7 votes
1 answer
14k views

How can XML Injection be exploited , need example?

6 votes
1 answer
5k views

XSS inside CSS when " is encoded?

6 votes
3 answers
1k views

How to compile java_atomicreferencearray (CVE-2012-0507) exploit to run calc.exe on system?

5 votes
1 answer
7k views

Is it possible to exploit XSS inside User-Agent header? [duplicate]

4 votes
2 answers
5k views

Is it possible to forge post request and bypass maxlength in input box?

3 votes
1 answer
921 views

What are good tools for CRLF discovery? [closed]

3 votes
1 answer
682 views

Why is this XPATH injection attack failing, and what is going on in the background of attack?

3 votes
1 answer
9k views

How to intercept and replace request URL through Burp Proxy?

2 votes
1 answer
3k views

What are steps to defend against XML External Entity (XXE) Processing vulnerability?

2 votes
1 answer
2k views

Web application penetration testing resources? [duplicate]

2 votes
2 answers
6k views

CSRF over post request without redirection?

2 votes
2 answers
455 views

I need explanation on how serious these vulnerabilities are?

1 vote
1 answer
605 views

Need an explanation of Cross-Site Flashing?

0 votes
1 answer
2k views

How I add cookie to w3af for authenticated attacks?

0 votes
3 answers
1k views

How can this xss challenge be solved? [closed]

0 votes
1 answer
5k views

How to show xss alert box when you are inside function in <script> tag?

0 votes
1 answer
343 views

Dom xss posibility question?

0 votes
1 answer
3k views

How can attacker bypass this dom xss filter? [closed]

-1 votes
1 answer
741 views

What are correct steps to setup this exploit execution(jboss_invoke_deploy)?