HN Explorer

cujanovic

↗ HN profile [ 4612 ms ] full profile
Karma
1,563
Created
August 27, 2015 (10y ago)
Submissions
0
[ my public key: https://keybase.io/cujanovic; my proof: https://keybase.io/cujanovic/sigs/W9oZKA5fojzlzTwjzAEMWa5EacA5HaHFVCOAWhusJsk ]
  1. Abusing Enclosed Alphanumerics for SSRF

    http://169。254。169。254/ http://169｡254｡169｡254/ http://⑯⑨。②⑤④。⑯⑨｡②⑤④/ http://⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ｡⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ:80/ http://⓪ⓧⓐ⑨ⓕⓔⓐ⑨ⓕⓔ:80/ http://②⑧⑤②⓪③⑨①⑥⑥:80/ http://④②⑤｡⑤①⓪｡④②⑤｡⑤①⓪:80/ http://⓪②⑤①。⓪③⑦⑥。⓪②⑤①。⓪③⑦⑥:80/…

    1 points 0
  2. SSRF (Server Side Request Forgery) Testing Resources (cujanovic.com)
    1 points 0
  3. Open Redirect Payloads (github.com)
    1 points 0
  4. SSRF Testing resources – tools and links to help you test for SSRF in web apps (github.com)
    1 points 0
  5. How I Hacked My Smart TV from My Bed via a Command Injection (netsparker.com)
    2 points 0
  6. CVE-2016-8610 (SSL Death Alert) PoC (github.com)
    1 points 0
  7. The State of Wordpress Security (blog.ripstech.com)
    6 points 1
  8. Backslash Powered Scanning: Hunting Unknown Vulnerability Classes (blog.portswigger.net)
    4 points 0
  9. Linux containers in 500 lines of code (blog.lizzie.io)
    2 points 0
  10. CSRF protection bypass on any Django powered site via Google Analytics (hackerone.com)
    2 points 0
  11. How I gained access to TMobile’s national network for free (medium.com)
    62 points 10
  12. Nginx resolver vulnerabilities allow cache poisoning attack (blog.zorinaq.com)
    1 points 0
  13. How I Could Have Hacked Multiple Facebook Accounts (medium.com)
    5 points 0
  14. Vulnerability in the Linux kernel's tcp stack implementation (blogs.akamai.com)
    3 points 0
  15. The Imperva HTTP/2 Vulnerability Report and NGINX (nginx.com)
    2 points 1
  16. How to steal any developer's local database (bouk.co)
    2 points 0
  17. HTTP/2: Faster and better than HTTP 1.1, but is it more secure? [pdf] (imperva.com)
    6 points 0
  18. Mr Robot S02E01 easter egg (0x41.no)
    6 points 0
  19. Firefox – Same-Origin Policy Bypass (CVE-2015-7188) (blog.bentkowski.info)
    32 points 5
  20. Debian Exim Spool Local Root (halfdog.net)
    1 points 0
  21. Auditing CSP Headers with Burp and ZAP (blog.gosecure.ca)
    1 points 0
  22. XSS and WordPress – The Aftermath (research.g0blin.co.uk)
    2 points 0
  23. Nginx: Supporting HTTP/2 for Google Chrome Users (nginx.com)
    5 points 0
  24. Integer Overflow in php_html_entities() (bugs.php.net)
    2 points 0
  25. Mr. Robot Blind SQL Injection Vulnerability (corenumb.wordpress.com)
    101 points 38