ARTÍCULOS SOBRE CIBERSEGURIDAD
Writeups, análisis de vulnerabilidades, casos prácticos y apuntes para mejorar la seguridad de tus aplicaciones y servicios
Modifying serialized data types
Laboratorio de Portswigger sobre Insecure Deserialization
Using application functionality to exploit insecure deserialization
Laboratorio de Portswigger sobre Insecure Deserialization
Excessive trust in client-side controls
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
High-level logic vulnerability
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Inconsistent security controls
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Flawed enforcement of business rules
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Discovering vulnerabilities quickly with targeted scanning
Laboratorio de Portswigger sobre Essential Skills
Scanning non-standard data structures
Laboratorio de Portswigger sobre Essential Skills
JWT authentication bypass via jku header injection
Laboratorio de Portswigger sobre JWT