Tubidy
Cross site WebSocket hijacking

Cross site WebSocket hijacking

05:07 | 802 views |
Download MP3

Related Videos

Manipulating the WebSocket handshake to exploit vulnerabilities

Manipulating the WebSocket handshake to exploit vulnerabilities

Exploiting Java deserialization with Apache Commons

Exploiting Java deserialization with Apache Commons

Developing a custom gadget chain for PHP deserialization

Developing a custom gadget chain for PHP deserialization

Excessive trust in client-side controls

Excessive trust in client-side controls

Developing a custom gadget chain for Java deserialization

Developing a custom gadget chain for Java deserialization

Arbitrary object injection in PHP

Arbitrary object injection in PHP

Modifying serialized objects

Modifying serialized objects

Exploiting Ruby deserialization using a documented gadget chain

Exploiting Ruby deserialization using a documented gadget chain

Using PHAR deserialization to deploy a custom gadget chain

Using PHAR deserialization to deploy a custom gadget chain

infinite money logic flaw

infinite money logic flaw

Information disclosure on debug page

Information disclosure on debug page

Web cache poisoning with an unkeyed header

Web cache poisoning with an unkeyed header

Information disclosure in version control history

Information disclosure in version control history

Web cache poisoning with multiple header

Web cache poisoning with multiple header

URL normalization

URL normalization

High level logic vulnerability

High level logic vulnerability

Low-level logic flaw

Low-level logic flaw

Inconsistent handling of exceptional input

Inconsistent handling of exceptional input

Modifying serialized data types

Modifying serialized data types

Username enumeration via response timing

Username enumeration via response timing