HN user

d0bby

22 karma
Posts19
Comments14
View on HN
raw.githubusercontent.com 7y ago

Jason Haddix' XSS Mindmap

d0bby
1pts0
d21v5rjx8s17cr.cloudfront.net 7y ago

OS Command Injection [video]

d0bby
1pts0
challenge.intigriti.io 7y ago

The Intigriti XSS challenge is over, but still up. Give it a try

d0bby
1pts0
www.youtube.com 7y ago

Escaping Alcatraz: Breaking Out of [ ] Sandboxed Environments – Kirk Hayes

d0bby
3pts0
github.com 7y ago

Fingerprinting Organizations with Collected Archives

d0bby
2pts0
www.youtube.com 7y ago

Why my job is so easy and how you can make it harder – Pen Test War Stories

d0bby
2pts0
www.youtube.com 7y ago

Web Cache Deception Attack – Omer Gil

d0bby
1pts0
www.youtube.com 7y ago

Don't Talk to the Police – James Duane

d0bby
15pts4
www.youtube.com 7y ago

Exploiting CORS Misconfigurations for BTC and Bounties – James Kettle

d0bby
2pts0
www.youtube.com 7y ago

0d0a CRLF Injection and More SSRF Magic

d0bby
2pts0
blog.underdogsecurity.com 7y ago

RCE in EA's Origin Desktop Client

d0bby
1pts0
www.youtube.com 7y ago

Attacking Modern Web Technologies – Frans Rosen

d0bby
2pts0
www.skeletonscribe.net 7y ago

@albinowax: CTF Writeup [H1-212]

d0bby
1pts0
www.hackerone.com 7y ago

Illustration: How a Bug Bounty Works

d0bby
1pts0
www.skeletonscribe.net 7y ago

Password Reset and Web-Cache Poisoning (and a Little Surprise in RFC-2616)

d0bby
2pts1
news.ycombinator.com 7y ago

How many hours do you reCAPTCHA per week?

d0bby
4pts8
ocw.upm.es 7y ago

Exact String Pattern Recognition [pdf]

d0bby
1pts0
ghidra.re 7y ago

Ghidra API Docs

d0bby
1pts0
gtfobins.github.io 7y ago

Show HN: GTFOBins – Lolbas for Unix

d0bby
1pts0

Turns out an unrelated 3rd party can suddenly remotely disable Tor anonymity protections at their whim, and possibly endanger TBB users (or deliberately help in deanonymizing them).

remotely disable Tor anonymity protections [!]

Maybe a 'certificate is expiring soon' warning on the browser side?

Users would know and Mozilla would be forced to keep certs valid.

People are talking about uBlock Origin...

I really like it, no doubts it's good and everyone should consider using it.

BUT, since we are talking about uBlock Origin, I'd like to mention another awesome extention Raymond Hill made.

uMatrix (https://github.com/gorhill/uMatrix)

uMatrix alone is very powerful, and will prevent most ads.

Yes you as a user need to do the work, but the result is better.

If you like the idea of uMatrix, you may also look at NoScript!

Actually, I live almost ad free using NoScript + uBlock Origin for at least 2 yrs.

$rewrite... what a dumb feature btw!

I'm using it with a VPN rn, it's working fine. But yeah using a VPN/TOR increases the risk profile (or whatever they call it). It even slows down the animation of loading new images, it drives me crazy.

[dead] 7 years ago

"Europe-wide protests are planned to take place on 23rd of March" See you there! ;)