Profile Activity

Tomi Begher

Reputation

Top tag

man-in-the-middle

Next privilege

50 Rep.

Comment everywhere

Badges

Newest

Teacher

Next badge

3/5

Impact

0 posts edited

0 helpful flags

7 votes cast

Summary Answers Questions Tags Badges Favorites Bounties Reputation All actions

11 Questions

Views Newest Activity Votes

votes

answers

197

views

No limit of characters in name field - Any risk?

websites

Jun 11 at 12:26 schroeder♦ 89.1k

votes

answer

views

Does HSTS preload includes subdomains?

hsts

May 30 at 1:49 forest 47.4k

votes

answer

views

How to protect against mitm attacks in first connection? - no HSTS Preload

man-in-the-middle hsts

May 11 at 1:47 forest 47.4k

votes

answer

134

views

Is there a vulnerability in subdomain redirection, similar to Open Redirect

url-redirection

Jul 26 at 16:02 Community♦ 1

votes

answers

views

What's the impact of UXSS in open redirect vulnerability?

xss

Jun 19 at 15:24 Tomi Begher 43

votes

answer

120

views

Captcha against Mitm attacks works?

man-in-the-middle captcha

Jun 5 at 2:26 CBHacking 15k

votes

answers

views

Read-only Access to Forbidden directorys with no “sensitive” information

web-application bug-bounty

May 25 at 3:43 Infra 197

votes

answer

views

HSTS preload and requisites on domain - subdomains must be added too?

man-in-the-middle hsts content-security-policy

May 24 at 18:40 Math 68

votes

answers

views

no HSTS but still protected to mitm attacks?

man-in-the-middle hsts

May 21 at 3:17 Tomi Begher 43

votes

answer

494

views

How to exploit publicy known vunerable version of jquery?

xss jquery

Apr 27 at 8:05 Denis 3,413

-2

votes

answers

134

views

is passive mixed content actually exploitable?

man-in-the-middle bug-bounty mixed-content

Jun 1 at 21:17 Tomasz Zieliński 171

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

11 Questions

No limit of characters in name field - Any risk?

Does HSTS preload includes subdomains?

How to protect against mitm attacks in first connection? - no HSTS Preload

Is there a vulnerability in subdomain redirection, similar to Open Redirect

What's the impact of UXSS in open redirect vulnerability?

Captcha against Mitm attacks works?

Read-only Access to Forbidden directorys with no “sensitive” information

HSTS preload and requisites on domain - subdomains must be added too?

no HSTS but still protected to mitm attacks?

How to exploit publicy known vunerable version of jquery?

is passive mixed content actually exploitable?