detectify
- Karma
- 1,581
- Created
- May 1, 2012 (14y ago)
- Submissions
- 0
Detectify is a SaaS based website security scanner that will help you stay safe. We audit your site's security so you can focus on web development.
- LastPass autofill exploit (labs.detectify.com)
- Slack bot token leakage exposing business critical information (labs.detectify.com)
- Chrome Extensions – AKA Total Absence of Privacy (labs.detectify.com)
- Using Google Cloud to Bypass NoScript (labs.detectify.com)
- Stealing files from web servers by exploiting a popular PDF generator (labs.detectify.com)
- Hijacking of abandoned subdomains part 2 (labs.detectify.com)
- Hostile subdomain takeover using Heroku/GitHub/Desk + more (blog.detectify.com)
- Complete free quick test for #shellshock + how it works (shellshock.detectify.com)
- How the celebrity hack could have been done (labs.detectify.com)
- The lesser known pitfalls of allowing file uploads on your website (blog.detectify.com)
- How we got read access on Google’s production servers (blog.detectify.com)
tl;dr: How we got $10.000. We were able to upload an XML file to Google. The XML parser was vulnerable to XXE. We got full read access to their production servers, including the /etc/passwd.
- Is this the ultimate SQL injection payload? (blog.detectify.com)
- XSS where you least expect it (blog.detectify.com)
-
Today there is a lot of excitement at the office as we just launched early access at the Slush conference. We have been in private beta for about 4 months and this is one of the bigger releases so far during product…
- Ask HN: Do you dare to show your PHP easter egg? (blog.detectify.com)
- When vulnerability disclosure fails (jannefi.wordpress.com)
- How we built a simple arcade game using SVG (blog.detectify.com)
- Universal XSS (UXSS) in Opera (blog.detectify.com)
- Reflected XSS browser test! (xss.detectify.com)
Test your browser against Reflected XSS
- SQL injection in one minute (blog.detectify.com)
A short 101 tutorial on how SQL-injections work
- Zerg Rush: How to influence Google (blog.detectify.com)
The google Zerg Rush Easter Egg has not surpassed anyone on HN. However, was Google inspired by our Detectify game? You be the judge – you'll need to sign up for our beta of course to get to the game (well worth it).