Skip navigation

Category Archives: Appsec

PHP Backdoors Collection

Need some nice webshells?  Your target is using PHP?  Try out this collection of PHP Backdoors!

How Not to do Responsible Disclosure

A security researcher in Florida has been arrested after exposing SQLi vulnerabilities in an election-related webapp, but apparently, he didn’t have any sort of permission to do so.

 

OOPS!

ASUS Memory Management Exploit Dropped

http://rol.im/asux/

 

Introduction to Cross-Site Scripting

Google offers an application security education page about XSS.  If you’re new to it, or just want to get more in-depth and determine how to mitigate it, give it a read.

https://www.google.com/about/appsecurity/learning/xss/