Profile Activity

Tomi Begher

Reputation

Top tag

man-in-the-middle

Next privilege

75 Rep.

Set bounties

Badges

Newest

Teacher

Next badge

3/5

Impact

0 posts edited

0 helpful flags

7 votes cast

Summary Answers Questions Tags Badges Favorites Bounties Reputation All actions

11 Questions

Views Newest Activity Votes

votes

answer

183

views

Is there a vulnerability in subdomain redirection, similar to Open Redirect

url-redirection

Nov 23 at 17:02 Community♦ 1

votes

answers

views

What's the impact of UXSS in open redirect vulnerability?

xss

Jun 19 at 15:24 Tomi Begher 73

votes

answers

204

views

No limit of characters in name field - Any risk?

websites

Jun 11 at 12:26 schroeder♦ 94.5k

votes

answer

135

views

Captcha against Mitm attacks works?

man-in-the-middle captcha

Jun 5 at 2:26 CBHacking 17.6k

-2

votes

answers

151

views

is passive mixed content actually exploitable?

man-in-the-middle bug-bounty mixed-content

Jun 1 at 21:17 Tomasz Zieliński 191

votes

answer

views

Does HSTS preload includes subdomains?

hsts

May 30 at 1:49 forest 50.4k

votes

answers

views

Read-only Access to Forbidden directorys with no “sensitive” information

web-application bug-bounty

May 25 at 3:43 Infra 204

votes

answer

131

views

HSTS preload and requisites on domain - subdomains must be added too?

man-in-the-middle hsts content-security-policy

May 24 at 18:40 Math 123

votes

answers

103

views

no HSTS but still protected to mitm attacks?

man-in-the-middle hsts

May 21 at 3:17 Tomi Begher 73

votes

answer

views

How to protect against mitm attacks in first connection? - no HSTS Preload

man-in-the-middle hsts

May 11 at 1:47 forest 50.4k

votes

answer

759

views

How to exploit publicy known vunerable version of jquery?

xss jquery

Apr 27 at 8:05 Denis 3,433

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

11 Questions

Is there a vulnerability in subdomain redirection, similar to Open Redirect

What's the impact of UXSS in open redirect vulnerability?

No limit of characters in name field - Any risk?

Captcha against Mitm attacks works?

is passive mixed content actually exploitable?

Does HSTS preload includes subdomains?

Read-only Access to Forbidden directorys with no “sensitive” information

HSTS preload and requisites on domain - subdomains must be added too?

no HSTS but still protected to mitm attacks?

How to protect against mitm attacks in first connection? - no HSTS Preload

How to exploit publicy known vunerable version of jquery?