Profile Activity

Tomi Begher

Reputation

Top tag

man-in-the-middle

Next privilege

75 Rep.

Set bounties

Badges

Newest

Teacher

Next badge

3/5

Impact

0 posts edited

0 helpful flags

7 votes cast

Summary Answers Questions Tags Badges Favorites Bounties Reputation All actions

11 Questions

Views Newest Activity Votes

votes

answers

197

views

No limit of characters in name field - Any risk?

websites

Jun 11 at 12:26 schroeder♦ 90.1k

votes

answer

views

Does HSTS preload includes subdomains?

hsts

May 30 at 1:49 forest 48.5k

votes

answer

views

How to protect against mitm attacks in first connection? - no HSTS Preload

man-in-the-middle hsts

May 11 at 1:47 forest 48.5k

votes

answer

134

views

Is there a vulnerability in subdomain redirection, similar to Open Redirect

url-redirection

Jul 26 at 16:02 Community♦ 1

votes

answers

views

What's the impact of UXSS in open redirect vulnerability?

xss

Jun 19 at 15:24 Tomi Begher 73

votes

answer

121

views

Captcha against Mitm attacks works?

man-in-the-middle captcha

Jun 5 at 2:26 CBHacking 15.3k

votes

answers

views

Read-only Access to Forbidden directorys with no “sensitive” information

web-application bug-bounty

May 25 at 3:43 Infra 207

votes

answer

views

HSTS preload and requisites on domain - subdomains must be added too?

man-in-the-middle hsts content-security-policy

May 24 at 18:40 Math 123

votes

answers

views

no HSTS but still protected to mitm attacks?

man-in-the-middle hsts

May 21 at 3:17 Tomi Begher 73

votes

answer

512

views

How to exploit publicy known vunerable version of jquery?

xss jquery

Apr 27 at 8:05 Denis 3,413

-2

votes

answers

134

views

is passive mixed content actually exploitable?

man-in-the-middle bug-bounty mixed-content

Jun 1 at 21:17 Tomasz Zieliński 181

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

11 Questions

No limit of characters in name field - Any risk?

Does HSTS preload includes subdomains?

How to protect against mitm attacks in first connection? - no HSTS Preload

Is there a vulnerability in subdomain redirection, similar to Open Redirect

What's the impact of UXSS in open redirect vulnerability?

Captcha against Mitm attacks works?

Read-only Access to Forbidden directorys with no “sensitive” information

HSTS preload and requisites on domain - subdomains must be added too?

no HSTS but still protected to mitm attacks?

How to exploit publicy known vunerable version of jquery?

is passive mixed content actually exploitable?