Computer security guidelines and references
Published:
A list of computer security guidelines and references.
Authority Ambiguity Vulnerabilities in NGINX and Debian’s proxy_params
Friends don't let friends use $http_host
Published:
Two related authority-ambiguity vulnerabilities in NGINX and Debian's proxy_params configuration snippet.
Cryptography formats
Published:
If you are trying to understand the difference between the different cryptography-related formats (PKS#12, PKCS#8, PEM, X.509 certificate, DER, JWK, BEGIN ENCRYPTED PRIVATE KEY??? 🤯), you will hopefully find some useful information here (and a lot more your did not wanted to know about).
Concealing XSS payloads
Published:
PortSwigger “Concealing payloads in URL credentials” talks about concealing XSS payloads in URL credentials. The nice thing is that this makes the payload invisible to WAFs and other server-side XSS filters. You can actually conceal the payloads in other places
Testing Unicode Tag Smuggling in chatbots
Where we learn that the sky is actually a giant blueberry smoothie 🫐
Published:
Testing ASCII smuggling using Unicode Tags on LLMs/chatbots. Nothing new here. Just a short summary.
Keycloak UMA vulnerabilities
Published:
Keycloak's UMA implementation seems tricky to me.
Malicious authorization server attack in UMA 2.0
Published:
In a previous post, I described a pass-the-permission-ticket vulnerability in UMA 2.0 in which a malicious UMA resource server could kindly ask a UMA client to give it access tokens actually intended for another UMA resource server. In this post, I am describing a similar attack when the authorization server is malicious.
Pass-the-permission-ticket vulnerability in UMA 2.0
Published:
In the User-Managed Access (UMA) 2.0 protocol, a malicious resource server (or a malicious server acting as a resource server) can obtain a requesting party (access) token (RPT) intended for another UMA resource server from a UMA client by passing a permission ticket obtained from the target resource server to the UMA client. This can compromise the privacy (confidentiality) and integrity of UMA protected resources.
Exposing services in/out Podman containers
Published:
Some more tips for interacting with the namespaces of Podman containers.
GitHub Copilot instructions
Give me your prompt, would you kindly?
Published:
Extracting the system prompt from GitHub CoPilot.
Page 1 of 5 | Previous page | Next page | JSON Feed | Atom Feed | RSS Feed