qazbnm456/awesome-web-security🐶 Una lista curata di materiali e risorse di Web Security.
# Awesome Web Security [](https://github.com/sindresorhus/awesome)
[<img src="https://upload.wikimedia.org/wikipedia/commons/6/61/HTML5_logo_and_wordmark.svg" align="right" width="70">](https://www.w3.org/TR/html5/)
> 🐶 Lista curata di materiali e risorse per la sicurezza Web.
Inutile dire che la maggior parte dei siti web soffre di vari tipi di bug che possono eventualmente portare a vulnerabilità. Perché ciò accade così spesso? Possono esserci molti fattori coinvolti, tra cui configurazioni errate, mancanza di competenze di sicurezza degli ingegneri, ecc. Per contrastare ciò, ecco una lista curata di materiali e risorse per la sicurezza Web per apprendere tecniche di penetration testing all'avanguardia, e ti incoraggio vivamente a leggere prima questo articolo "[So you want to be a web security researcher?](https://portswigger.net/blog/so-you-want-to-be-a-web-security-researcher)".
*Leggi le [linee guida per i contributi](https://github.com/qazbnm456/awesome-web-security/blob/master/CONTRIBUTING.md) prima di contribuire.*
---
<p align="center"><b>🌈 Vuoi rafforzare le tue competenze di penetration testing?</b><br>Ti consiglio di giocare ad alcuni <a href="https://github.com/apsdehal/awesome-ctf" target="_blank">awesome-ctf</a>s.</p>
---
Se ti piace questa awesome list e vorresti supportarla, dai un'occhiata alla mia pagina [Patreon](https://www.patreon.com/boik) :)<br>Inoltre, non dimenticare di dare un'occhiata alle mie [repos](https://github.com/qazbnm456) 🐾 o di salutarmi su [X (formerly Twitter)](https://x.com/boik_su)!
---
### 🤖 Usi un assistente AI?
Questa lista è disponibile anche come Claude Code Skill, così gli agenti AI possono interrogarla in tempo reale — nessuna istantanea obsoleta, legge sempre l'ultimo `data/index.json` da `master`.
**Installazione** (un comando, consigliato):```bash
npx skills add qazbnm456/awesome-web-security -a claude-code -g -y
```
Oppure all'interno di [Claude Code](https://claude.com/claude-code), utilizza il marketplace dei plugin:```text
/plugin marketplace add qazbnm456/awesome-web-security
/plugin install awesome-web-security
```
Per [Codex](https://github.com/openai/codex), sostituisci `-a claude-code` → `-a codex`.
Poi fai qualsiasi domanda sulla sicurezza web e l'abilità si attiva su argomenti come XSS, SQLi, SSRF, JWT, OAuth, recon, WAF evasion, deserialization, SAML, CTF write-ups, e altro. Vedi [`skills/awesome-web-security/SKILL.md`](https://github.com/qazbnm456/awesome-web-security/blob/master/skills/awesome-web-security/SKILL.md) per la lista completa dei trigger.
## Sommario
- [Riassunti](#digests)
- [Forum](#forums)
- [Introduzione](#intro)
- [XSS](#xss---cross-site-scripting)
- [Prototype Pollution](#prototype-pollution)
- [Iniezione CSV](#csv-injection)
- [Iniezione SQL](#sql-injection)
- [Iniezione di comandi](#command-injection)
- [Iniezione ORM](#orm-injection)
- [Iniezione FTP](#ftp-injection)
- [XXE](#xxe---xml-external-entity)
- [CSRF](#csrf---cross-site-request-forgery)
- [Clickjacking](#clickjacking)
- [SSRF](#ssrf---server-side-request-forgery)
- [Web Cache Poisoning](#web-cache-poisoning)
- [Relative Path Overwrite](#relative-path-overwrite)
- [Open Redirect](#open-redirect)
- [SAML](#saml)
- [Upload](#upload)
- [Rails](#rails)
- [AngularJS](#angularjs)
- [ReactJS](#reactjs)
- [SSL/TLS](#ssltls)
- [Webmail](#webmail)
- [NFS](#nfs)
- [AWS](#aws)
- [Azure](#azure)
- [Impronta digitale](#fingerprint)
- [Enumerazione dei sottodomini](#sub-domain-enumeration)
- [Crittografia](#crypto)
- [Web Shell](#web-shell)
- [OSINT](#osint)
- [DNS Rebinding](#dns-rebinding)
- [Deserializzazione](#deserialization)
- [OAuth](#oauth)
- [JWT](#jwt)
- [Evasioni](#evasions)
- [XXE](#evasions-xxe)
- [CSP](#evasions-csp)
- [WAF](#evasions-waf)
- [JSMVC](#evasions-jsmvc)
- [Autenticazione](#evasions-authentication)
- [Trucchi](#tricks)
- [CSRF](#tricks-csrf)
- [Clickjacking](#tricks-clickjacking)
- [Esecuzione di codice remoto](#tricks-rce)
- [XSS](#tricks-xss)
- [Iniezione SQL](#tricks-sql-injection)
- [Iniezione NoSQL](#tricks-nosql-injection)
- [Iniezione FTP](#tricks-ftp-injection)
- [XXE](#tricks-xxe)
- [SSRF](#tricks-ssrf)
- [Web Cache Poisoning](#tricks-web-cache-poisoning)
- [Iniezione di header](#tricks-header-injection)
- [URL](#tricks-url)
- [Deserializzazione](#tricks-deserialization)
- [OAuth](#tricks-oauth)
- [Altri](#tricks-others)
- [Sfruttamento del browser](#browser-exploitation)
- [PoC](#pocs)
- [Database](#pocs-database)
- [Cheetsheets](#cheetsheets)
- [Strumenti](#tools)
- [Audit](#tools-auditing)
- [Iniezione di comandi](#tools-command-injection)
- [Ricognizione](#tools-reconnaissance)
- [OSINT](#tools-osint)
- [Enumerazione dei sottodomini](#tools-sub-domain-enumeration)
- [Generazione di codice](#tools-code-generating)
- [Fuzzing](#tools-fuzzing)
- [Scansione](#tools-scanning)
- [Test di penetrazione](#tools-penetration-testing)
- [Offensivo](#tools-offensive)
- [XSS](#tools-xss)
- [Iniezione SQL](#tools-sql-injection)
- [Iniezione di template](#tools-template-injection)
- [XXE](#tools-xxe)
- [CSRF](#tools-csrf)
- [SSRF](#tools-ssrf)
- [Fughe di dati](#tools-leaking)
- [Rilevamento](#tools-detecting)
- [Prevenzione](#tools-preventing)
- [Proxy](#tools-proxy)
- [Webshell](#tools-webshell)
- [Disassemblatore](#tools-disassembler)
- [Decompilatore](#tools-decompiler)
- [DNS Rebinding](#tools-dns-rebinding)
- [Altri](#tools-others)
- [Database di ingegneria sociale](#social-engineering-database)
- [Blog](#blogs)
- [Utenti Twitter](#twitter-users)
- [Pratiche](#practices)
- [Applicazione](#practices-application)
- [AWS](#practices-aws)
- [XSS](#practices-xss)
- [ModSecurity / OWASP ModSecurity Core Rule Set](#practices-modsecurity)
- [Community](#community)
- [Varie](#miscellaneous)
## Riassunti
- [CTF Field Guide](https://trailofbits.github.io/ctf/) - Scritto da [Trail of Bits](https://www.trailofbits.com/).
- [Hacker101](https://www.hacker101.com/) - Scritto da [hackerone](https://www.hackerone.com/start-hacking).
- [Infosec Newbie](https://www.sneakymonkey.net/2017/04/23/infosec-newbie/) - Scritto da [Mark Robinson](https://www.sneakymonkey.net/).
- [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings/) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
- [The Daily Swig - Web security digest](https://portswigger.net/daily-swig) - Scritto da [PortSwigger](https://portswigger.net/).
- [The Magic of Learning](https://bitvijays.github.io/) - Scritto da [@bitvijays](https://bitvijays.github.io/aboutme.html).
- [Web Application Security Zone by Netsparker](https://www.netsparker.com/blog/web-security/) - Scritto da [Netsparker](https://www.netsparker.com/).
- [tl;dr sec](https://tldrsec.com/) - Riepilogo settimanale dei migliori strumenti di sicurezza, post dei blog e ricerche sulla sicurezza.
## Forum
- [Dark Reading](https://www.darkreading.com/Default.asp) - Connettere la comunità della sicurezza informatica.
- [HackDig](http://en.hackdig.com/) - Scava articoli di sicurezza web di alta qualità per hacker.
- [Phrack Magazine](http://www.phrack.org/) - Ezine scritta da e per hacker.
- [Security Weekly](https://securityweekly.com/) - La rete di podcast sulla sicurezza.
- [The Hacker News](https://thehackernews.com/) - La sicurezza in modo serio.
- [The Register](http://www.theregister.co.uk/) - Morde la mano che dà da mangiare all'IT.
<a name="intro"></a>
## Introduzione
<a name="xss"></a>
### XSS - Cross-Site Scripting
- [C.XSS Guide](https://excess-xss.com/) - Scritto da [@JakobKallin](https://github.com/JakobKallin) e [Irene Lobo Valbuena](https://www.linkedin.com/in/irenelobovalbuena/).
- [Cross-Site Scripting – Application Security – Google](https://www.google.com/intl/sw/about/appsecurity/learning/xss/) - Scritto da [Google](https://www.google.com/).
- [H5SC](https://github.com/cure53/H5SC) - Scritto da [@cure53](https://github.com/cure53).
- [THE BIG BAD WOLF - XSS AND MAINTAINING ACCESS](http://www.paulosyibelo.com/2018/06/the-big-bad-wolf-xss-and-maintaining.html) - Scritto da [Paulos Yibelo](http://www.paulosyibelo.com/).
- [AwesomeXSS](https://github.com/s0md3v/AwesomeXSS) - Scritto da [@s0md3v](https://github.com/s0md3v).
- [XSS.png](https://github.com/LucaBongiorni/XSS.png) - Scritto da @jackmasa.
- [PayloadsAllTheThings - XSS Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XSS%20Injection) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
- [payloadbox/xss-payload-list](https://github.com/payloadbox/xss-payload-list) - Scritto da [@payloadbox](https://github.com/payloadbox).
- [Laravel Content Security Policy: Complete Implementation Guide](https://blog.shakiltech.com/laravel-content-security-policy-guide/) - Guida pratica per implementare Content Security Policy in Laravel — ciclo di vita del nonce, integrazione con Vite e Livewire, report delle violazioni, e una checklist pre-implementazione, di [@itxshakil](https://github.com/itxshakil).
<a name="prototype-pollution"></a>
### Prototype Pollution
- [Prototype pollution attack in NodeJS application](https://github.com/HoLyVieR/prototype-pollution-nsec18/blob/master/paper/JavaScript_prototype_pollution_attack_in_NodeJS.pdf) - Scritto da [@HoLyVieR](https://github.com/HoLyVieR).
- [Real-world JS - 1](https://blog.p6.is/Real-World-JS-1/) - Scritto da [@po6ix](https://twitter.com/po6ix).
- [Exploiting prototype pollution – RCE in Kibana (CVE-2019-7609)](https://research.securitum.com/prototype-pollution-rce-kibana-cve-2019-7609/) - Scritto da [@securitymb](https://twitter.com/securitymb).
<a name="csv-injection"></a>
### Iniezione CSV
- [CSV Injection -> Meterpreter on Pornhub](https://news.webamooz.com/wp-content/uploads/bot/offsecmag/147.pdf) - Scritto da [Andy](https://blog.zsec.uk/).
- [The Absurdly Underestimated Dangers of CSV Injection](http://georgemauer.net/2017/10/07/csv-injection.html) - Scritto da [George Mauer](http://georgemauer.net/).
- [PayloadsAllTheThings - CSV Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
<a name="sql-injection"></a>
### Iniezione SQL
- [SQL Injection Cheat Sheet](https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/) - Scritto da [@netsparker](https://twitter.com/netsparker).
- [SQL Injection Pocket Reference](https://websec.ca/kb/sql_injection) - Scritto da [@LightOS](https://twitter.com/LightOS).
- [SQL Injection Wiki](https://sqlwiki.netspi.com/) - Scritto da [NETSPI](https://www.netspi.com/).
- [PayloadsAllTheThings - SQL Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/SQL%20Injection) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
- [payloadbox/sql-injection-payload-list](https://github.com/payloadbox/sql-injection-payload-list) - Scritto da [@payloadbox](https://github.com/payloadbox).
<a name="command-injection"></a>
### Iniezione di comandi
- [Potential command injection in resolv.rb](https://github.com/ruby/ruby/pull/1777) - Scritto da [@drigg3r](https://github.com/drigg3r).
- [PayloadsAllTheThings - Command Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
- [payloadbox/command-injection-payload-list](https://github.com/payloadbox/command-injection-payload-list) - Scritto da [@payloadbox](https://github.com/payloadbox).
<a name="orm-injection"></a>
### Iniezione ORM
- [HQL : Hyperinsane Query Language (or how to access the whole SQL API within a HQL injection ?)](https://www.synacktiv.com/ressources/hql2sql_sstic_2015_en.pdf) - Scritto da [@_m0bius](https://twitter.com/_m0bius).
- [HQL for pentesters](http://blog.h3xstream.com/2014/02/hql-for-pentesters.html) - Scritto da [@h3xstream](https://twitter.com/h3xstream/).
- [ORM Injection](https://www.slideshare.net/simone.onofri/orm-injection) - Scritto da [Simone Onofri](https://onofri.org/).
- [ORM2Pwn: Exploiting injections in Hibernate ORM](https://www.slideshare.net/0ang3el/orm2pwn-exploiting-injections-in-hibernate-orm) - Scritto da [Mikhail Egorov](https://0ang3el.blogspot.tw/).
<a name="ftp-injection"></a>
### Iniezione FTP
- [Advisory: Java/Python FTP Injections Allow for Firewall Bypass](http://blog.blindspotsecurity.com/2017/02/advisory-javapython-ftp-injections.html) - Scritto da [Timothy Morgan](https://plus.google.com/105917618099766831589).
- [SMTP over XXE − how to send emails using Java's XML parser](https://shiftordie.de/blog/2017/02/18/smtp-over-xxe/) - Scritto da [Alexander Klink](https://shiftordie.de/).
<a name="xxe"></a>
### XXE - XML eXternal Entity
- [XXE](https://phonexicum.github.io/infosec/xxe.html) - Scritto da [@phonexicum](https://twitter.com/phonexicum).
- [PayloadsAllTheThings - XXE Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XXE%20Injection) - Scritto da vari contributori.
- [XML external entity (XXE) injection](https://portswigger.net/web-security/xxe) - Scritto da [portswigger](https://portswigger.net/).
- [XML Schema, DTD, and Entity Attacks](https://www.vsecurity.com/download/publications/XMLDTDEntityAttacks.pdf) - Scritto da [Timothy D. Morgan](https://twitter.com/ecbftw) e Omar Al Ibrahim.
- [payloadbox/xxe-injection-payload-list](https://github.com/payloadbox/xxe-injection-payload-list) - Scritto da [@payloadbox](https://github.com/payloadbox).
<a name="csrf"></a>
### CSRF - Cross-Site Request Forgery
- [Wiping Out CSRF](https://medium.com/@jrozner/wiping-out-csrf-ded97ae7e83f) - Scritto da [@jrozner](https://medium.com/@jrozner).
- [PayloadsAllTheThings - CSRF Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
<a name="clickjacking"></a>
### Clickjacking
- [Clickjacking](https://www.imperva.com/learn/application-security/clickjacking/) - Scritto da [Imperva](https://www.imperva.com/).
- [X-Frame-Options: All about Clickjacking?](https://github.com/cure53/Publications/blob/master/xfo-clickjacking.pdf?raw=true) - Scritto da [Mario Heiderich](http://www.slideshare.net/x00mario).
<a name="ssrf"></a>
### SSRF - Server-Side Request Forgery
- [SSRF bible. Cheatsheet](https://docs.google.com/document/d/1v1TkWZtrhzRLy0bYXBcdLUedXGb9njTNIJXa3u9akHM/edit) - Scritto da [Wallarm](https://wallarm.com/).
- [PayloadsAllTheThings - Server-Side Request Forgery](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
<a name="web-cache-poisoning"></a>
### Web Cache Poisoning
- [Practical Web Cache Poisoning](https://portswigger.net/blog/practical-web-cache-poisoning) - Scritto da [@albinowax](https://twitter.com/albinowax).
- [PayloadsAllTheThings - Web Cache Deception](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Web%20Cache%20Deception) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
<a name="relative-path-overwrite"></a>
### Relative Path Overwrite
- [Large-scale analysis of style injection by relative path overwrite](https://blog.acolyer.org/2018/05/28/large-scale-analysis-of-style-injection-by-relative-path-overwrite/) - Scritto da [The Morning Paper](https://blog.acolyer.org/).
- [MBSD Technical Whitepaper - A few RPO exploitation techniques](https://www.mbsd.jp/Whitepaper/rpo.pdf) - Scritto da [Mitsui Bussan Secure Directions, Inc.](https://www.mbsd.jp/).
<a name="open-redirect"></a>
### Open Redirect
- [Open Redirect Vulnerability](https://s0cket7.com/open-redirect-vulnerability/) - Scritto da [s0cket7](https://s0cket7.com/).
- [PayloadsAllTheThings - Open Redirect](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Open%20Redirect) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
- [payloadbox/open-redirect-payload-list](https://github.com/payloadbox/open-redirect-payload-list) - Scritto da [@payloadbox](https://github.com/payloadbox).
<a name="saml"></a>
### Security Assertion Markup Language (SAML)
- [How to Hunt Bugs in SAML; a Methodology - Part I](https://epi052.gitlab.io/notes-to-self/blog/2019-03-07-how-to-test-saml-a-methodology/) - Scritto da [epi](https://epi052.gitlab.io/notes-to-self/).
- [How to Hunt Bugs in SAML; a Methodology - Part II](https://epi052.gitlab.io/notes-to-self/blog/2019-03-13-how-to-test-saml-a-methodology-part-two/) - Scritto da [epi](https://epi052.gitlab.io/notes-to-self/).
- [How to Hunt Bugs in SAML; a Methodology - Part III](https://epi052.gitlab.io/notes-to-self/blog/2019-03-16-how-to-test-saml-a-methodology-part-three/) - Scritto da [epi](https://epi052.gitlab.io/notes-to-self/).
- [PayloadsAllTheThings - SAML Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/SAML%20Injection) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
<a name="upload"></a>
### Upload
- [File Upload Restrictions Bypass](https://www.exploit-db.com/docs/english/45074-file-upload-restrictions-bypass.pdf) - Scritto da [Haboob Team](https://www.exploit-db.com/author/?a=9381).
- [PayloadsAllTheThings - Upload Insecure Files](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files) - Scritto da [@swisskyrepo](https://github.com/swisskyrepo).
<a name="rails"></a>
### Rails
- [Rails Security - First part](https://hackmd.io/s/SkuTVw5O-) - Scritto da [@qazbnm456](https://github.com/qazbnm456).
- [Official Rails Security Guide](http://guides.rubyonrails.org/security.html) - Scritto da [Rails team](https://rubyonrails.org/).
- [Rails SQL Injection](https://rails-sqli.org) - Scritto da [@presidentbeef](https://github.com/presidentbeef).
- [Zen Rails Security Checklist](https://github.com/brunofacca/zen-rails-security-checklist) - Scritto da [@brunofacca](https://github.com/brunofacca).
<a name="angularjs"></a>
### AngularJS
- [DOM based Angular sandbox escapes](http://blog.portswigger.net/2017/05/dom-based-angularjs-sandbox-escapes.html) - Scritto da [@garethheyes](https://twitter.com/garethheyes).
- [XSS without HTML: Client-Side Template Injection with AngularJS](http://blog.portswigger.net/2016/01/xss-without-html-client-side-template.html) - Scritto da [Gareth Heyes](https://www.blogger.com/profile/10856178524811553475).
<a name="reactjs"></a>
### ReactJS
- [XSS via a spoofed React element](http://danlec.com/blog/xss-via-a-spoofed-react-element) - Scritto da [Daniel LeCheminant](http://danlec.com/).
<a name="ssl-tls"></a>
### SSL/TLS
- [SSL & TLS Penetration Testing](https://www.aptive.co.uk/blog/tls-ssl-security-testing/) - Scritto da [APTIVE](https://www.aptive.co.uk/).
- [Practical introduction to SSL/TLS](https://github.com/Hakky54/mutual-tls-ssl) - Scritto da [@Hakky54](https://github.com/Hakky54).
<a name="webmail"></a>
### Webmail
- [Why mail() is dangerous in PHP](https://blog.ripstech.com/2017/why-mail-is-dangerous-in-php/) - Scritto da [Robin Peraglie](https://www.ripstech.com/).
<a name="nfs"></a>
### NFS
- [NFS | PENETRATION TESTING ACADEMY](https://pentestacademy.wordpress.com/2017/09/20/nfs/?t=1&cn=ZmxleGlibGVfcmVjc18y&refsrc=email&iid=b34422ce15164e99a193fea0ccc7a02f&uid=1959680352&nid=244+289476616) - Scritto da [PENETRATION ACADEMY](https://pentestacademy.wordpress.com/).
<a name="aws"></a>
### AWS
- [PENETRATION TESTING AWS STORAGE: KICKING THE S3 BUCKET](https://rhinosecuritylabs.com/penetration-testing/penetration-testing-aws-storage/) - Scritto da Dwight Hohnstein di [Rhino Security Labs](https://rhinosecuritylabs.com/).
- [AWS PENETRATION TESTING PART 1. S3 BUCKETS](https://www.virtuesecurity.com/aws-penetration-testing-part-1-s3-buckets/) - Scritto da [VirtueSecurity](https://www.virtuesecurity.com/).
- [AWS PENETRATION TESTING PART 2. S3, IAM, EC2](https://www.virtuesecurity.com/aws-penetration-testing-part-2-s3-iam-ec2/) - Scritto da [VirtueSecurity](https://www.virtuesecurity.com/).
- [Misadventures in AWS](https://labs.f-secure.com/blog/misadventures-in-aws) - Scritto da Christian Demko.
<a name="azure"></a>
### Azure
- [Cloud Security Risks (Part 1): Azure CSV Injection Vulnerability](https://rhinosecuritylabs.com/azure/cloud-security-risks-part-1-azure-csv-injection-vulnerability/) - Scritto da [@spengietz](https://twitter.com/spengietz).
- [Common Azure Security Vulnerabilities and Misconfigurations](https://rhinosecuritylabs.com/cloud-security/common-azure-security-vulnerabilities/) - Scritto da [@rhinobenjamin](https://twitter.com/rhinobenjamin).
<a name="fingerprint"></a>
### Impronta digitale
<a name="sub-domain-enumeration"></a>
### Enumerazione dei sottodomini
- [A penetration tester’s guide to sub-domain enumeration](https://blog.appsecco.com/a-penetration-testers-guide-to-sub-domain-enumeration-7d842d5570f6) - Scritto da [Bharath](https://blog.appsecco.com/@yamakira_).
- [The Art of Subdomain Enumeration](https://blog.sweepatic.com/art-of-subdomain-enumeration/) - Scritto da [Patrik Hudak](https://blog.sweepatic.com/author/patrik/).
<a name="crypto"></a>
### Crittografia
- [Applied Crypto Hardening](https://bettercrypto.org/) - Scritto da [The bettercrypto.org Team](https://bettercrypto.org/).
- [What is a Side-Channel Attack ?](https://www.csoonline.com/article/3388647/what-is-a-side-channel-attack-how-these-end-runs-around-encryption-put-everyone-at-risk.html) - Scritto da [J.M Porup](https://www.csoonline.com/author/J.M.-Porup/).
<a name="web-shell"></a>
### Web Shell
- [Hacking with JSP Shells](https://blog.netspi.com/hacking-with-jsp-shells/) - Scritto da [@_nullbind](https://twitter.com/_nullbind).
- [Hunting for Web Shells](https://www.tenable.com/blog/hunting-for-web-shells) - Scritto da [Jacob Baines](https://www.tenable.com/profile/jacob-baines).
<a name="osint"></a>
### OSINT- [Hacking Cryptocurrency Miners with OSINT Techniques](https://medium.com/@s3yfullah/hacking-cryptocurrency-miners-with-osint-techniques-677bbb3e0157) - Scritto da [@s3yfullah](https://medium.com/@s3yfullah).
- [OSINT x UCCU Workshop on Open Source Intelligence](https://www.slideshare.net/miaoski/osint-x-uccu-workshop-on-open-source-intelligence) - Scritto da [Philippe Lin](https://www.slideshare.net/miaoski).
- [102 Deep Dive in the Dark Web OSINT Style Kirby Plessas](https://www.youtube.com/watch?v=fzd3zkAI_o4) - Presentato da [@kirbstr](https://twitter.com/kirbstr).
- [La guida più completa per trovare l’email di chiunque](https://www.blurbiz.io/blog/the-most-complete-guide-to-finding-anyones-email) - Scritto da [Timur Daudpota](https://www.blurbiz.io/).
<a name="dns-rebinding"></a>
### DNS Rebinding
- [Attacking Private Networks from the Internet with DNS Rebinding](https://medium.com/@brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325) - Scritto da [@brannondorsey](https://medium.com/@brannondorsey).
- [Hacking home routers from the Internet](https://medium.com/@radekk/hackers-can-get-access-to-your-home-router-1ddadd12a7a7) - Scritto da [@radekk](https://medium.com/@radekk).
<a name="deserialization"></a>
### Deserializzazione
- [What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability.](https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/) - Scritto da [@breenmachine](https://twitter.com/breenmachine).
- [.NET Roulette: Exploiting Insecure Deserialization in Telerik UI](https://www.youtube.com/watch?v=--6PiuvBGAU) - Scritto da [@noperator](https://twitter.com/noperator).
- [Attacking .NET deserialization](https://www.youtube.com/watch?v=eDfGpu3iE4Q) - Scritto da [@pwntester](https://twitter.com/pwntester).
- [How to exploit the DotNetNuke Cookie Deserialization](https://pentest-tools.com/blog/exploit-dotnetnuke-cookie-deserialization/) - Scritto da [CRISTIAN CORNEA](https://pentest-tools.com/blog/author/pentest-cristian/).
- [HOW TO EXPLOIT LIFERAY CVE-2020-7961 : QUICK JOURNEY TO POC](https://www.synacktiv.com/en/publications/how-to-exploit-liferay-cve-2020-7961-quick-journey-to-poc.html) - Scritto da [@synacktiv](https://twitter.com/synacktiv).
<a name="oauth"></a>
### OAuth
- [What is going on with OAuth 2.0? And why you should not use it for authentication.](https://medium.com/securing/what-is-going-on-with-oauth-2-0-and-why-you-should-not-use-it-for-authentication-5f47597b2611) - Scritto da [@damianrusinek](https://medium.com/@damianrusinek).
- [Introduction to OAuth 2.0 and OpenID Connect](https://pragmaticwebsecurity.com/courses/introduction-oauth-oidc.html) - Scritto da [@PhilippeDeRyck](https://twitter.com/PhilippeDeRyck).
<a name="jwt"></a>
### JWT
- [Hardcoded secrets, unverified tokens, and other common JWT mistakes](https://r2c.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/) - Scritto da [@ermil0v](https://twitter.com/ermil0v).
## Evasioni
<a name="evasions-xxe"></a>
### XXE
- [Bypass Fix of OOB XXE Using Different encoding](https://twitter.com/SpiderSec/status/1191375472690528256) - Scritto da [@SpiderSec](https://twitter.com/SpiderSec).
<a name="evasions-csp"></a>
### CSP
- [CSP: bypassing form-action with reflected XSS](https://labs.detectify.com/2016/04/04/csp-bypassing-form-action-with-reflected-xss/) - Scritto da [Detectify Labs](https://labs.detectify.com/).
- [TWITTER XSS + CSP BYPASS](http://www.paulosyibelo.com/2017/05/twitter-xss-csp-bypass.html) - Scritto da [Paulos Yibelo](http://www.paulosyibelo.com/).
- [Neatly bypassing CSP](https://lab.wallarm.com/how-to-trick-csp-in-letting-you-run-whatever-you-want-73cb5ff428aa) - Scritto da [Wallarm](https://wallarm.com/).
- [Evading CSP with DOM-based dangling markup](https://portswigger.net/blog/evading-csp-with-dom-based-dangling-markup) - Scritto da [portswigger](https://portswigger.net/).
- [GitHub's CSP journey](https://githubengineering.com/githubs-csp-journey/) - Scritto da [@ptoomey3](https://github.com/ptoomey3).
- [GitHub's post-CSP journey](https://githubengineering.com/githubs-post-csp-journey/) - Scritto da [@ptoomey3](https://github.com/ptoomey3).
- [Any protection against dynamic module import?](https://github.com/w3c/webappsec-csp/issues/243) - Scritto da [@shhnjk](https://twitter.com/@shhnjk).
<a name="evasions-waf"></a>
### WAF
- [Airbnb – When Bypassing JSON Encoding, XSS Filter, WAF, CSP, and Auditor turns into Eight Vulnerabilities](https://buer.haus/2017/03/08/airbnb-when-bypassing-json-encoding-xss-filter-waf-csp-and-auditor-turns-into-eight-vulnerabilities/) - Scritto da [@Brett Buerhaus](https://twitter.com/bbuerhaus).
- [How to bypass libinjection in many WAF/NGWAF](https://medium.com/@d0znpp/how-to-bypass-libinjection-in-many-waf-ngwaf-1e2513453c0f) - Scritto da [@d0znpp](https://medium.com/@d0znpp).
- [Web Application Firewall (WAF) Evasion Techniques](https://medium.com/secjuice/waf-evasion-techniques-718026d693d8) - Scritto da [@secjuice](https://twitter.com/secjuice).
- [Web Application Firewall (WAF) Evasion Techniques #2](https://medium.com/secjuice/web-application-firewall-waf-evasion-techniques-2-125995f3e7b0) - Scritto da [@secjuice](https://twitter.com/secjuice).
<a name="evasions-jsmvc"></a>
### JSMVC
- [JavaScript MVC and Templating Frameworks](http://www.slideshare.net/x00mario/jsmvcomfg-to-sternly-look-at-javascript-mvc-and-templating-frameworks) - Scritto da [Mario Heiderich](http://www.slideshare.net/x00mario).
<a name="evasions-authentication"></a>
### Autenticazione
- [Trend Micro Threat Discovery Appliance - Session Generation Authentication Bypass (CVE-2016-8584)](http://blog.malerisch.net/2017/04/trend-micro-threat-discovery-appliance-session-generation-authentication-bypass-cve-2016-8584.html) - Scritto da [@malerisch](https://twitter.com/malerisch) e [@steventseeley](https://twitter.com/steventseeley).
## Trucchi
<a name="tricks-csrf"></a>
### CSRF
- [Exploiting CSRF on JSON endpoints with Flash and redirects](https://blog.appsecco.com/exploiting-csrf-on-json-endpoints-with-flash-and-redirects-681d4ad6b31b) - Scritto da [@riyazwalikar](https://blog.appsecco.com/@riyazwalikar).
- [Neat tricks to bypass CSRF-protection](https://zhuanlan.zhihu.com/p/32716181) - Scritto da [Twosecurity](https://twosecurity.io/).
- [Stealing CSRF tokens with CSS injection (without iFrames)](https://github.com/dxa4481/cssInjection) - Scritto da [@dxa4481](https://github.com/dxa4481).
- [Cracking Java’s RNG for CSRF - Javax Faces and Why CSRF Token Randomness Matters](https://blog.securityevaluators.com/cracking-javas-rng-for-csrf-ea9cacd231d2) - Scritto da [@rramgattie](https://blog.securityevaluators.com/@rramgattie).
- [If HttpOnly You Could Still CSRF… Of CORS you can!](https://medium.com/@_graphx/if-httponly-you-could-still-csrf-of-cors-you-can-5d7ee2c7443) - Scritto da [@GraphX](https://twitter.com/GraphX).
<a name="tricks-clickjacking"></a>
### Clickjacking
- [Clickjackings in Google worth 14981.7$](https://medium.com/@raushanraj_65039/google-clickjacking-6a04132b918a) - Scritto da [@raushanraj_65039](https://medium.com/@raushanraj_65039).
<a name="tricks-rce"></a>
### Esecuzione di codice remoto
- [DRUPAL 7.X SERVICES MODULE UNSERIALIZE() TO RCE](https://www.ambionics.io/blog/drupal-services-module-rce) - Scritto da [Ambionics Security](https://www.ambionics.io/).
- [Exploiting Node.js deserialization bug for Remote Code Execution](https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/) - Scritto da [OpSecX](https://opsecx.com/index.php/author/ajinabraham/).
- [GitHub Enterprise Remote Code Execution](https://bounty.github.com/researchers/iblue.html) - Scritto da [@iblue](https://github.com/iblue).
- [How I Chained 4 vulnerabilities on GitHub Enterprise, From SSRF Execution Chain to RCE!](http://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilities-on.html) - Scritto da [Orange](http://blog.orange.tw/).
- [How we exploited a remote code execution vulnerability in math.js](https://capacitorset.github.io/mathjs/) - Scritto da [@capacitorset](https://github.com/capacitorset).
- [$36k Google App Engine RCE](https://sites.google.com/site/testsitehacking/-36k-google-app-engine-rce) - Scritto da [Ezequiel Pereira](https://sites.google.com/site/testsitehacking/).
- [Poor RichFaces](https://codewhitesec.blogspot.com/2018/05/poor-richfaces.html) - Scritto da [CODE WHITE](https://www.code-white.com/).
- [Remote Code Execution on a Facebook server](https://blog.scrt.ch/2018/08/24/remote-code-execution-on-a-facebook-server/) - Scritto da [@blaklis_](https://twitter.com/blaklis_).
- [Evil Teacher: Code Injection in Moodle](https://blog.ripstech.com/2018/moodle-remote-code-execution/) - Scritto da [RIPS Technologies](https://www.ripstech.com/).
- [WebLogic RCE (CVE-2019-2725) Debug Diary](https://paper.seebug.org/910/) - Scritto da Badcode@Knownsec 404 Team.
- [What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability.](https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/) - Scritto da [@breenmachine](https://twitter.com/@breenmachine).
- [CVE-2019-1306: ARE YOU MY INDEX?](https://www.thezdi.com/blog/2019/10/23/cve-2019-1306-are-you-my-index) - Scritto da [@yu5k3](https://twitter.com/yu5k3).
<a name="tricks-xss"></a>
### XSS
- [DON'T TRUST THE DOM: BYPASSING XSS MITIGATIONS VIA SCRIPT GADGETS](https://www.blackhat.com/docs/us-17/thursday/us-17-Lekies-Dont-Trust-The-DOM-Bypassing-XSS-Mitigations-Via-Script-Gadgets.pdf) - Scritto da [Sebastian Lekies](https://twitter.com/slekies), [Krzysztof Kotowicz](https://twitter.com/kkotowicz) e [Eduardo Vela](https://twitter.com/sirdarckcat).
- [ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and everything else](http://www.slideshare.net/x00mario/es6-en) - Scritto da [Mario Heiderich](http://www.slideshare.net/x00mario).
- [How I found a $5,000 Google Maps XSS (by fiddling with Protobuf)](https://medium.com/@marin_m/how-i-found-a-5-000-google-maps-xss-by-fiddling-with-protobuf-963ee0d9caff#.u50nrzhas) - Scritto da [@marin_m](https://medium.com/@marin_m).
---
[Read more](https://github.com/qazbnm456/awesome-web-security)