Web-Security-Learning

Repository: https://github.com/CHYbeta/Web-Security-Learning

Knowledge Planet [Vulnerability Attack and Defense]: https://t.zsxq.com/mm2zBeq

Table of Contents:

• Web-Security-Learning
• Web Security
  • SQL Injection
    • MySQL
    • MSSQL
    • PostgreSQL
    • MongoDB
    • Techniques
    • Tools
  • XSS
  • CSRF
  • Other Frontend Security
  • SSRF
  • XXE
  • JSONP Injection
  • SSTI
  • Code Execution / Command Execution
  • File Inclusion
  • File Upload / Parsing Vulnerabilities
  • Logic Vulnerabilities
  • Unauthorized Access/Information Disclosure
    • redis
  • RPO (Relative Path Overwrite)
  • Web Cache
  • PHP Related
    • Weak Types
    • Random Number Issues
    • Pseudo Protocols
    • Serialization
    • php mail header injection
    • Other
    • PHP Code Audit
  • Java Web
    • Deserialization
    • Struct2
    • Java Web Code Audit
    • Other
  • Python Web
  • Node.js
  • WAF Related
• Penetration Testing
  • Course
  • Information Gathering
  • Penetration
  • Penetration Practice
  • Privilege Escalation
  • Penetration Techniques
  • Operations
  • DDoS
• CTF
  • Techniques Summary
• Misc

Web Security

SQL Injection

MySQL

• MySQL False Injection and Techniques Summary
• MySQL Injection Attack and Defense
• SQL Injection Learning Summary
• Several Techniques for SQL Injection Defense and Bypass
• MySQL Uncommon Techniques
• MySQL Injection: Enumerating Table Names, Column Names, and Database Names When Errors Are Displayed
• Advanced SQL Injection: Obfuscation and Bypass
• MySQL Constraint Attack
• Summary of MySQL Database Penetration and Vulnerability Exploitation
• Practical Techniques for Bypassing WAF in MySQL
• NetSPI SQL Injection Wiki
• Uncommon SQL Injection Techniques
• Three Methods to Accelerate Time-Based Blind SQL Injection in MySQL
• Efficient Time-Based SQL Blind Injection Using MySQL Bit Operators
• MySQL UDF Backdoor
• Blind Injection After MySQL Parentheses Are Filtered
• SSRF To RCE in MySQL
• Brief Analysis of MySQL Blind Injection
• MySQL Character Encoding Exploitation Techniques

MSSQL

• MSSQL DBA Privilege to Obtain WebShell
• MSSQL Injection Attack and Defense
• CLR Exploitation Techniques in SQL Server
• Two Methods to Execute Commands and Get Output Without xp_cmdshell in MSSQL

PostgreSQL

• PostgreSQL Database Exploitation Methods
• PostgreSQL Penetration Testing Guide
• Using PostgreSQL to Get Shell in Penetration Testing

MongoDB

• Understanding MongoDB Attack and Defense in Ten Minutes
• MongoDB Security – PHP Injection Detection
• Technical Sharing: How to Hack MongoDB?
• MongoDB Security: Injection Attacks in PHP
• A Case Study of MongoDB Injection Attack

Techniques

• My WAF Bypass Method (SQL Injection)
• Bypass 360 Host Guard SQL Injection Defense
• Interesting SQL Injection Techniques
• Summary of SQL Injection Experience in CTF Competitions
• How to Bypass libinjection in WAF/NGWAF for SQL Injection
• HackMe-SQL-Injection-Challenges
• Bypassing WAF Injection
• Sharing Ideas for Bypassing GET and POST Injection Defenses
• Common Ideas and Unusual Techniques for SQL Injection
• Beyond SQLi: Obfuscate and Bypass
• Practical Use of Dnslog in SQL Injection
• SQL Injection: How to Bypass CSRF Tokens via Python CGIHTTPServer
• Bypass D Shield IIS Firewall SQL Injection Defense (Multiple Techniques)

Tools

• How Much Do You Know About sqlmap's Built-in Tamper Scripts?
• Using sqlmap – Built-in Bypass Scripts (Tamper)
• Using Burp Macros and sqlmap to Bypass CSRF Protection for SQL Injection
• sqlmap Usage Summary
• Comments on SQLmap Tamper Scripts
• Second-Order SQL Injection via Burp and Custom sqlmap Tamper
• SQLMAP JSON Format Detection
• Summary of SQLmap User Manual (Part 1)
• Summary of SQLmap User Manual (Part 2)

XSS

• Discussion on Same-Origin Policy Attack and Defense
• Revisiting Same-Origin Policy
• Summary of Cross-Origin Methods
• Frontend Security Series (1): How to Prevent XSS Attacks?
• Brief Discussion on Cross-Site Scripting Attack and Defense
• The Art of Cross-Site – XSS Introduction
• DOMXSS Wiki
• XSS Bypass Cookbook
• Content Security Policy Tutorial
• From Swiss Army Knife to Transformers – Expanding XSS Attack Surface
• Frontend Defense from Beginner to Abandoning – CSP Evolution
• Interesting Ideas Under Strict CSP (34c3 CTF)
• Bypassing CSP using polyglot JPEGs
• Bypass unsafe-inline mode CSP
• Chrome XSS Auditor – SVG Bypass
• Cross site scripting payload for fuzzing
• XSS Without Dots
• Alternative to Javascript Pseudo-Protocol
• Exploration of Uncommon XSS Exploitation

CSRF

• Wiping Out CSRF
• CSRF Attack and Defense
• Detailed Explanation of CSRF Vulnerability Threats and Defense with Code
• Insights on the Shortcomings of Cookie-Form CSRF Defense Mechanisms
• Some Thoughts on JSON CSRF
• Exploiting JSON Cross Site Request Forgery (CSRF) using Flash
• Brief Discussion on Session Mechanism and CSRF Attack/Defense
• CSRF Fancy Bypassing Referer Techniques
• CSRF Techniques in Major SRCs
• White Hat Bug Hunting – Cross-Site Request Forgery (CSRF) Edition
• Read-Based CSRF – Content Hijacking Requiring Interaction

Other Frontend Security

• Magic Tags with Closure Priority in HTML
• JavaScript Dangerous Functions (Part 1) - HTML Manipulation
• Expanding the Attack Surface of Safari Local File Read Vulnerability
• Attacking ReactJS Applications via Script Injection Vulnerabilities
• JSON Hijacking Techniques in Modern Web
• Viewing Frontend Code Security from WeChat Mini Programs

SSRF

• SSRF (Server-Side Request Forgery) Testing Resources
• Build Your SSRF Exploit Framework SSRF
• Analysis of SSRF Attack Examples
• SSRF Vulnerability Analysis and Exploitation
• Experience in Discovering SSRF Vulnerabilities
• Learning and Exploiting SSRF Vulnerabilities
• Summary of Methods to Bypass IP Restrictions in SSRF Vulnerabilities
• What is Server Side Request Forgery (SSRF)?
• Use DNS Rebinding to Bypass SSRF in Java
• SSRF in JAVA
• DNS Rebinding Technique to Bypass SSRF/Proxy IP Restrictions
• SSRF Tips
• SSRF Caused by SOAP
• SSRF: CVE-2017-9993 FFmpeg + AVI + HLS
• SSRF Attack via Split Attack
• Translation of SSRF Attack Document
• PHP SSRF Techniques How to bypass filter_var(), preg_match() and parse_url()

XXE

• Brief Discussion on XXE Vulnerability Attack and Defense
• XXE Vulnerability Analysis
• XML Entity Injection Vulnerability Attack and Defense
• Learning and Exploiting XML Entity Injection Vulnerabilities
• XXE Injection: Attack and Defense - XXE Injection: Attack and Prevent
• XXE (XML External Entity Injection) Vulnerability Practice
• Hunting in the Dark - Blind XXE
• Hunting in the Dark - Blind XXE
• XML External Entity Vulnerability Training Module
• What Comes to Mind When XXE Is Mentioned
• Simple Understanding and Testing of XXE Vulnerability
• My View on XXE Vulnerability Attack and Defense
• Some Techniques for Exploiting XXE Vulnerabilities
• Magic Content-Type – Playing with XXE Attack in JSON
• XXE-DTD Cheat Sheet
• XML? Be cautious!
• XSLT Server Side Injection Attacks
• Java XXE Vulnerability
• xml-attacks.md

JSONP Injection

• JSONP Injection Analysis
• JSONP Security Attack and Defense Technology
• A Small Experiment and Summary on JSONP
• Using JSONP for Cross-Origin Information Gathering
• Some Understanding of Cross-Origin and JSONP (For Beginners)
• Watering Hole Attack: JSONP Hijacking – Information Theft

SSTI

• Jinja2 template injection filter bypasses
• Random Talk on Flask Injection
• Brief Analysis of Server-Side Template Injection (SSTI)
• Exploring SSTI in Flask/Jinja2
• Research on Server-Side Injection Issues in Flask Jinja2 Development
• Research on Server-Side Injection Issues in Flask Jinja2 Development II
• Exploring SSTI in Flask/Jinja2, Part II
• Injecting Flask
• Server-Side Template Injection: RCE for the modern webapp
• Exploiting Python Code Injection in Web Applications
• Using Python Features to Execute Arbitrary Code in Jinja2 Templates
• Python Template Strings and Template Injection
• Ruby ERB Template Injection
• Server-Side Template Injection Attacks

Code Execution / Command Execution

• Discussion on PHP Arbitrary Code Execution and Defense from PHP Source Code and Extension Development
• Command Injection/Shell Injection
• PHP Code Injection Analysis
• Using the Environment Variable LD_PRELOAD to Bypass php disable_function and Execute System Commands
• Hack PHP mail additional_parameters
• Detailed Analysis of PHP mail() Function Exploitation Techniques
• A Tragedy Caused by Improper Use of mail() Function in PHP Application Development
• Time-Based Feedback RCE
• System Command Execution Vulnerability Caused by Improper Use of Regular Expressions
• Command Injection Breaking Length Restrictions

File Inclusion

• PHP File Inclusion Vulnerability
• Turning LFI into RFI
• Summary of PHP File Inclusion Vulnerabilities
• Common File Inclusion Scenarios and Defense
• File Inclusion via zip or phar Protocol
• File Inclusion Vulnerability 1
• File Inclusion Vulnerability 2

File Upload / Parsing Vulnerabilities

• Upload-labs Walkthrough
• File Upload and WAF Attack and Defense
• My WAF Bypass Method (Upload)
• File Upload Vulnerability (Bypass Techniques)
• Server Parsing Vulnerabilities
• File Upload Summary
• Code Audit: Logical Upload Vulnerability Discovery
• Penetration Testing Methodology: File Upload
• Some Explorations on Filename Parsing
• Web Security – Upload Vulnerability Bypass
• Upload Bypassing WAF

Logic Vulnerabilities

• Code Audit: Logical Upload Vulnerability Discovery
• Logic First – Contains Various Cool Techniques
• Analysis of Common Logic Vulnerabilities in Web Security Testing (Practical)
• Logic Vulnerability: Password Reset
• Logic Vulnerability: Payment Vulnerability
• Logic Vulnerability: Unauthorized Access
• Summary of Password Recovery Logic Vulnerabilities
• Analysis and Organization of Common Password Reset Vulnerabilities
• Small Summary of Password Logic Vulnerabilities
• Vulnerability Discovery: Logic Vulnerability Mining
• tom0li: Summary of Logic Vulnerabilities

Unauthorized Access/Information Disclosure

• Tips for Unauthorized Access
• Summary of Unauthorized Access Vulnerabilities
• Detection and Exploitation of Unauthorized Access Vulnerabilities
• Summary of Common Web Source Code Leakage
• Bug Hunting Tips: Summary of Information Disclosure

redis

• Using Redis to Write WebShell
• Analysis of Redis Unauthorized Access Combined with SSH Key File Exploitation
• Summary of Redis Unauthorized Access Vulnerability Exploitation。
• Emergency Response: Unauthorized Access to Redis Leads to Remote Mining Script Injection (Defense)

RPO (Relative Path Overwrite)

• In-depth Analysis of RPO Vulnerability
• First Look at Relative Path Overwrite
• Detecting and exploiting path-relative stylesheet import (PRSSI) vulnerabilities
• RPO
• A few RPO exploitation techniques
• New Web Attack Technique: Introduction to RPO Attack
• RPO Gadgets

Web Cache

• Brief Analysis of Web Cache Deception Attack
• Practical Web Cache Poisoning
• Practical Web Cache Poisoning
• WEB CACHE DECEPTION ATTACK
• Detailed Explanation of Web Cache Deception Attack

PHP Related

• Weak Types
• Random Number Issues
• Pseudo Protocols
• Serialization
• php mail header injection
• Other
• PHP Code Audit

Java Web

• Deserialization
• Struct2
• Java Web Code Audit
• Other

Python Web

Node.js

WAF Related

• Course
• Information Gathering
• Penetration
• Penetration Practice
• Privilege Escalation
• Penetration Techniques
• Operations
• DDoS

CTF

• Techniques Summary

Misc### Weak Types

• From Weak Type Exploitation and Object Injection to SQL Injection
• Security Issues with PHP's "==" Operator
• Summary of PHP Weak Type Security Issues
• Brief Discussion on PHP Weak Type Security
• Security Issues of PHP Comparison Operators

Random Number Issues

• PHP mt_rand() Random Number Security
• Cracking PHP rand()
• Random Numbers in PHP
• php_mt_seed - PHP mt_rand() seed cracker
• The GLIBC random number generator
• A CTF Problem on Pseudo-Random Numbers

Pseudo Protocols

• Talking about the Magic of php://filter
• PHP Pseudo Protocols
• Using Gopher Protocol to Expand Attack Surface
• PHP Pseudo Protocol: Phar Protocol (Bypass Include)
• PHP Pseudo Protocol Analysis and Application
• Learning about LFI, RFI, and PHP Wrapper Protocol Security Issues

Serialization

• PHP Deserialization Vulnerability
• Brief Discussion on PHP Deserialization Vulnerability
• Causes of PHP Deserialization Vulnerability and Vulnerability Mining Techniques and Cases

php mail header injection

• What is Email Header Injection?
• PHP Email Injection Example

Others

• Summary of PHP Shell Bypass Ideas
• Decrypt PHP's eval based encryption with debugger
• Upgrade from LFI to RCE via PHP Sessions
• Xdebug: A Tiny Attack Surface
• Exploitable PHP functions
• Discussing PHP Format String Issues from WordPress SQLi
• Some Black Magic between PHP, Apache2, and the Operating System
• PHP Memory Corruption Vulnerability EXP Writing and Disabled Function Bypass
• Exploring Bypass Techniques for PHP Disabled Functions
• PHP Backdoor Made from .user.ini File

PHP Code Auditing

• PHP Vulnerability Mining - Advanced
• On Common PHP Vulnerabilities
• Brief Discussion on Getting Started with Code Audit: Audit Trip of a Blog System Latest Version
• PHP Code Auditing Tips in CTF
• PHP Code Auditing Tips
• Code Audit: File Over-Privilege and File Upload Search Techniques
• PHP Code Auditing Beginner Collection
• Learning PHP Code Auditing
• PHP Vulnerability Mining Ideas + Examples
• PHP Vulnerability Mining Ideas + Examples Chapter 2
• Brief Discussion on Getting Started with Code Audit: Audit Trip of a Blog System Latest Version
• PHP Code Audit Summary (1)
• 2018 PHP Application Security Design Guide

java-Web

Deserialization

• Java_JSON Deserialization Tragedy: Kanxue Security Developer Summit
• Viewing Java Deserialization Vulnerabilities from the Construction of Reflection Chains
• Java Deserialization Vulnerability from Understanding to Practice
• Java Serialization and Deserialization Security Analysis
• Java-Deserialization-Cheat-Sheet
• How to Attack Java Deserialization Process
• Deep Understanding of Java Deserialization Vulnerability
• Attacking Java Deserialization
• Detailed Analysis of Jackson Deserialization
• Java Security: Analysis of Deserialization Vulnerability
• fastjson Deserialization Vulnerability POC Analysis
• Learning about Apache Commons Collections Deserialization Vulnerability

Struct2

• Struts2 Command Execution Series Review

java-Web Code Auditing

• Some Tips for Java Code Auditing (with Scripts)
• Java Code Auditing Series: SQL Injection
• Java Code Auditing Series: Arbitrary File Download
• Java Code Auditing Series: XSS
• Java Code Auditing Series: Embellishing
• Java Secure Coding and Code Audit.md
• Java Code Auditing PPT

Others

• About JNDI Injection
• Magnifying the Attack Surface of Java Auditing Layer by Layer
• Talking about SQL Injection from a Java Perspective
• From a Java Perspective, In-depth Analysis of the Unpreventable Thief: "XSS"
• Is Your Java Web Configuration Secure?
• Spring Arbitrary File Read
• Several Methods to Execute Arbitrary Shell Commands in Runtime.getRuntime().exec(String cmd)

python-Web

• Python Web Security Summary
• Defencely Clarifies Python Object Injection Exploitation
• Exploiting Python Deserialization Vulnerabilities
• Explaining and exploiting deserialization vulnerability with Python(EN)
• Python PyYAML Deserialization Vulnerability Experiment and Payload Construction
• Python Format String Vulnerability (Django Example)
• Format Injection
• Be Careful with Python's New-Style String Format
• Python urllib HTTP Header Injection Vulnerability
• Hack Redis via Python urllib HTTP Header Injection
• Some Bypass Ideas Under Python WAF Blacklist Filtering
• N Ways to Escape Python Sandbox
• Using Memory Corruption to Achieve Python Sandbox Escape
• Python Sandbox Bypass
• pyt: A Static Source Code Analysis Tool for Python Applications
• Exploiting Python PIL Module Command Execution Vulnerability
• Code Execution in Python via File Decompression

Node-js

• Brief Discussion on Node.js Web Security Issues
• node.js + postgres from Injection to Getshell
• Pentesting Node.js Application : Nodejs Application Security (Requires VPN)
• Learning Pentesting Node.js Applications from Scratch
• The Magical "Bug" of URLs Containing Spaces in Node.js - A Small-Scale Deep Dive into HTTP Protocol

WAF Related

• Detailed Discussion on WAF and Static Statistical Analysis
• Awesome Payload and Bypass Summary
• WAF Bypass Reference Materials
• Brief Discussion on WAF Bypass Techniques
• Bypass Cases of addslashes Anti-Injection
• Brief Discussion on the Impact of JSON Parameter Parsing on WAF Bypass
• WAF Attack and Defense Research: Four Levels of Bypassing WAF
• Using HTTP Headers to Bypass WAF
• A Time Machine for Finding Vulnerabilities: Pinpointing Vulnerabilities

Penetration Testing

Course

• Web Service Penetration Testing from Beginner to Expert
• Penetration Testing Standards
• Penetration Testing Tools Cheat Sheet

Information Gathering

• See How I Collect Whois Information for All IPs on the Internet
• Brief Discussion on Information Gathering in Web Penetration Testing
• Penetration Testing Tutorial: How to Reconnaissance Targets and Collect Information?
• My Web Vulnerability Scanner Ideas and Techniques Summary (Domain Information Collection)
• The Art of Subdomains
• Penetration Testing Guide: Subdomain Enumeration Techniques
• Example Demonstration of How to Scientifically Collect Subdomains
• [Penetration Tool Series] Search Engines
• Basic Information Gathering for Domain Penetration (Basics)
• Summary of Internal Network Penetration Location Techniques
• Information Gathering in Post-Exploitation Attack and Defense
• Security Engineer Series: Sensitive Information Collection
• The Art of Subdomain Enumeration
• On Various Methods of Collecting Second-Level Domains
• Information Gathering in Penetration Testing from My Perspective
• Large Target Penetration - 01 Intrusion Information Gathering
• Vendor-Side Penetration Testing: Information Collection

Penetration

• [Mastering Linux Systems] Linux Intranet Penetration
• Penetration Testing Guide: Scope of Domain User Groups
• Supplementary Techniques for Intranet Host Discovery
• Summary of Linux Port Forwarding Features
• Intranet Penetration (Continuous Update)
• Practical SSH Port Forwarding
• Multi-Level Forwarding to Penetrate Hidden Intranets
• Intranet Forwarding Techniques
• Tools for Intranet Forwarding
• Various Reverse Shell Methods on Linux
• Summary of Various One-Liner Reverse Shells on Linux
• PHP Reverse Shell
• Using ew to Easily Penetrate Multi-Level Target Intranets
• Chat about Windows Intranet Penetration
• Windows Domain Lateral Penetration
• Summary of Forwarding Tools in Intranet Penetration
• Organizing Intranet Penetration Ideas and Tool Usage
• Using Cobalt Strike in Intranet Penetration

Penetration Practice

• Bug Hunting Experience | See How I Combined 4 Vulnerabilities to Achieve Remote Code Execution on GitHub Enterprise
• From Splash SSRF to Obtaining Root Privileges on Internal Servers
• Pivoting from blind SSRF to RCE with HashiCorp Consul
• How I Went from Command Execution to Finally Obtaining Root Privileges on the Intranet
• Information Gathering: SVN Source Code Social Engineering Acquisition and Penetration Practice
• Combination Punch of SQL Injection + XXE + File Traversal Vulnerabilities to Penetrate Deutsche Telekom
• Penetrating Hacking Team
• From Video System SQL Injection to Server Privileges
• From Serialized to Shell :: Exploiting Google Web Toolkit with EL Injection
• Brief Discussion on Penetration Testing Practice
• Penetration Testing Study Notes: Case 1
• Penetration Testing Study Notes: Case 2
• Penetration Testing Study Notes: Case 4
• Record of an Intranet Penetration

Privilege Escalation

• Privilege Escalation Tips
• linux-kernel-exploits: Collection of Linux Privilege Escalation Vulnerabilities
• windows-kernel-exploits: Collection of Windows Privilege Escalation Vulnerabilities
• Linux MySQL UDF Privilege Escalation
• Windows Privilege Escalation Series Part 1
• Windows Privilege Escalation Series Part 2
• Various Methods to Obtain SYSTEM Privileges

Penetration Techniques

• Vendor-Side Penetration Testing: Fuzzing and Brute Force
• Installation and Simple Use of Domain Penetration Tool Empire
• How to Convert a Simple Shell into a Fully Interactive TTY
• 60 Bytes - Fileless Penetration Testing Experiment
• Exploring New Ideas in Intranet Penetration: Exploration and Verification
• Research, Implementation, and Defense of Web Port Reuse Reverse Backdoors
• Talking About the Experience and Principles of Port Detection
• Summary of Port Penetration
• All About Port Scanning
• Penetration Techniques: N Ways to Upload Files via cmd
• Domain Penetration Tips: Obtaining LAPS Administrator Password
• Domain Penetration: Security Support Provider
• Random Thoughts on Intranet Penetration
• Domain Penetration: Traffic Hijacking
• Penetration Techniques: Parameter Hiding in Shortcut Files

Operations

• Security Operations: Those Vulnerabilities
• Meituan Waimai Automated Business Operations System Construction
• Evolution of Ele.me's Operations Infrastructure
• Nginx Configuration: One Article Is Enough
• Secure Configuration of Docker Remote API
• Apache Server Security Configuration
• IIS Server Security Configuration
• Tomcat Server Security Configuration
• Internet Enterprise Security: Port Monitoring
• Brief Discussion on Linux Emergency Response Techniques
• Manual Investigation for Emergency Analysis of Hacker Intrusions
• Enterprise Common Service Vulnerability Detection & Fix Collection
• Linux Baseline Hardening
• Apache server security: 10 tips to secure installation
• Attack and Defense in Oracle Database Operations (Complete)
• 18 Common Commands for Monitoring Network Bandwidth on Linux Servers

DDOS

• DDoS Attack and Defense Supplement
• A Small Idea on Defending Against Reflective DDoS Attacks
• Summary of DDoS Attack Methods
• DDoS Prevention and Protection Methods: Let's See If These 7 Claims Are Reliable
• DDoS Prevention and Protection: See What Individual Webmasters, Guoke, and Security Companies Say
• DDoS Prevention: Large Traffic DDoS Protection Plan, Plus a Calculator to Estimate Losses
• freeBuf Column
• Handling CC Attacks

CTF## Tips Summary

• CTF Offline Defense — Making Your Target Machine "Ironclad"
• ctf-wiki
• Creative Encoding and Encryption in CTF
• CTF Encryption and Decryption
• Summary of Methods for Separating Hidden Files in CTF Images
• The Principle and Application of MD5 Extension Attack
• Summary of ZIP in CTF Competitions
• Fifteen CTF Challenge Patterns for Web Dogs
• CTF Memo
• rcoil: Summary of CTF Offensive and Defensive Competitions
• CTF Memory Forensics Guide – Solid!

Miscellaneous

• Detailed Analysis of Padding Oracle Penetration Testing
• Exploring Compilation from TypeScript to WebAssembly
• High-Level Approaches for Finding Vulnerabilities
• Talking about HTML5 Local Storage – WebStorage
• Easily Overlooked Command Usage in Linux
• Summary of One-Line HTTP Server Commands in Various Scripting Languages
• Introduction to WebAssembly: Bringing Bytecode to the Web
• Using Hash Length Extension Attack to Get Shell on phpwind
• In-depth Understanding of Hash Length Extension Attack (Using SHA1 as Example)
• Analysis of the Program Execution Flow and Directory Structure of the Joomla Framework
• How to Backdoor Atom via Malicious Plugins
• CRLF Injection and Bypass Tencent WAF
• Notes on "The Tangled Web"
• Technical Detail: Web-Based LDAP Injection Vulnerability