10 2016 档案

How I Hacked Facebook with a Word Document

摘要：In one day I decided to stop hunting Bugs in Facebook Mobile android , IOS and Windows phone apps and start hunting bugs in facebook.com website. I sa 阅读全文

posted @ 2016-10-23 21:05 独裁者阅读(743) 评论(0) 推荐(0) 编辑

as2 loadvars

摘要：var submitListener:Object = new Object(); submitListener.click = function(evt:Object) { var result_lv:LoadVars = new LoadVars(); var send_lv:LoadVars 阅读全文

posted @ 2016-10-15 17:59 独裁者阅读(116) 评论(0) 推荐(0) 编辑

Playing with Content-Type – XXE on JSON Endpoints

摘要：

aaa 阅读全文

posted @ 2016-10-05 16:41 独裁者阅读(182) 评论(0) 推荐(0) 编辑

Hijacking tons of Instapage expired users Domains & Subdomains

摘要：Hello all so this post is about how I was able to hijack ton’s of domains/subdomains who using Instapage if there service got expired. What is instapa 阅读全文

posted @ 2016-10-04 10:02 独裁者阅读(430) 评论(0) 推荐(0) 编辑

Hostile Subdomain Takeover using HerokuGithubDesk + more

摘要：Hackers can claim subdomains with the help of external services. This attack is practically non-traceable, and affects at least 17 large service provi 阅读全文

posted @ 2016-10-03 20:56 独裁者阅读(422) 评论(0) 推荐(0) 编辑