Network profile

Tomi Begher

Reputation

Top tag

man-in-the-middle

Next privilege

75 Rep.

Set bounties

Badges

Newest

Teacher

Next badge

3/5

Impact

0 posts edited

0 helpful flags

7 votes cast

11 Questions

Votes Activity Newest Views

votes

answers

217

views

No limit of characters in name field - Any risk?

websites

Jun 11 at 12:26 schroeder♦ 97.6k

votes

answer

views

Does HSTS preload includes subdomains?

hsts

May 30 at 1:49 forest 50.7k

votes

answer

views

How to protect against mitm attacks in first connection? - no HSTS Preload

man-in-the-middle hsts

May 11 '19 at 1:47 forest 50.7k

votes

answer

209

views

Is there a vulnerability in subdomain redirection, similar to Open Redirect

url-redirection

Mar 22 at 18:01 Community♦ 1

votes

answers

views

What's the impact of UXSS in open redirect vulnerability?

xss

Jun 19 at 15:24 Tomi Begher 73

votes

answer

145

views

Captcha against Mitm attacks works?

man-in-the-middle captcha

Jun 5 at 2:26 CBHacking 18.1k

votes

answers

views

Read-only Access to Forbidden directorys with no “sensitive” information

web-application bug-bounty

May 25 at 3:43 Infra 204

votes

answer

172

views

HSTS preload and requisites on domain - subdomains must be added too?

man-in-the-middle hsts content-security-policy

May 24 at 18:40 Math 123

votes

answers

106

views

no HSTS but still protected to mitm attacks?

man-in-the-middle hsts

May 21 at 3:17 Tomi Begher 73

votes

answer

916

views

How to exploit publicy known vunerable version of jquery?

xss jquery

Apr 27 '19 at 8:05 Denis 3,443

-2

votes

answers

166

views

is passive mixed content actually exploitable?

man-in-the-middle bug-bounty mixed-content

Jun 1 at 21:17 Tomasz Zieliński 191

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

11 Questions

No limit of characters in name field - Any risk?

Does HSTS preload includes subdomains?

How to protect against mitm attacks in first connection? - no HSTS Preload

Is there a vulnerability in subdomain redirection, similar to Open Redirect

What's the impact of UXSS in open redirect vulnerability?

Captcha against Mitm attacks works?

Read-only Access to Forbidden directorys with no “sensitive” information

HSTS preload and requisites on domain - subdomains must be added too?

no HSTS but still protected to mitm attacks?

How to exploit publicy known vunerable version of jquery?

is passive mixed content actually exploitable?