#appsec

• 2017-10-09 Smart house attack vectors Beyond WPA2 and a firewall: WPS, pre-compromised LAN hosts, evil-maid USB attacks, weak ISP routers, leaked credentials, and sub-GHz radio protocols.
• 2014-12-04 Finding zero-day XSS through document metadata Embedding XSS payloads in EXIF and document metadata, and using the technique to find zero-days in image-sharing sites and WordPress.
• 2012-10-06 XSS explained The three ways to deliver a Cross-Site Scripting payload, the attack vectors that make it dangerous, and a short history of XSS in the wild.

all tags →