Tubidy
Excessive trust in client-side controls

Excessive trust in client-side controls

Duration unavailable | Views unavailable |
Download MP3

Related Videos

Authentication bypass via flawed state machine

Authentication bypass via flawed state machine

SMWA Contest Judging - jesse1237

SMWA Contest Judging - jesse1237

Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria

Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria

Using application functionality to exploit insecure deserialization

Using application functionality to exploit insecure deserialization

Authentication bypass via information disclosure

Authentication bypass via information disclosure

HOW TO DEFEAT NAKROTH WHEN YOU'RE BEHIND EARLY IN THE GAME? - YOU CAN EVEN BREAK THE HACK MAP!

HOW TO DEFEAT NAKROTH WHEN YOU'RE BEHIND EARLY IN THE GAME? - YOU CAN EVEN BREAK THE HACK MAP!

Using PHAR deserialization to deploy a custom gadget chain

Using PHAR deserialization to deploy a custom gadget chain

Insufficient workflow validation

Insufficient workflow validation

Manipulating the WebSocket handshake to exploit vulnerabilities

Manipulating the WebSocket handshake to exploit vulnerabilities

Cross site WebSocket hijacking

Cross site WebSocket hijacking

Username enumeration via subtly different responses

Username enumeration via subtly different responses

Source code disclosure via backup files

Source code disclosure via backup files

High level logic vulnerability

High level logic vulnerability

Exploiting Ruby deserialization using a documented gadget chain

Exploiting Ruby deserialization using a documented gadget chain

Internal cache poisoning

Internal cache poisoning

Inconsistent handling of exceptional input

Inconsistent handling of exceptional input

Flawed enforcement of business rules

Flawed enforcement of business rules

Web cache poisoning via an unkeyed query string

Web cache poisoning via an unkeyed query string

Inconsistent security controls

Inconsistent security controls