Learning security in the open :)
I’m a Penetration tester. I write up each topic as I learn it
the Vulnerabilities, the Tools, the Concepts that finally clicked
- 111writeups
- 110boxes rooted
- 5Certification
Latest writeups
All writeups-
Easy
Clickjacking with a frame buster script
clickjacking against a page that runs a frame buster script, bypassed with a sandboxed iframe that allows forms but not scripts
Clickjacking 3 min -
Easy
Clickjacking with form input data prefilled from a URL parameter
clickjacking that changes the victim's email by framing the account page with the email field prefilled through a ?email= url parameter, then overlaying a click me lure on the update email button so their click submits our address
Clickjacking 2 min -
Easy
Basic clickjacking with CSRF token protection
clickjacking that defeats a csrf token by framing the account page in a nearly invisible iframe over a decoy labelled click
Clickjacking 3 min -
Easy
CSRF with broken Referer validation
csrf where the Referer must contain the site's domain but the check is a naive substring match
Cross-site request forgery (CSRF) 3 min -
Easy
CSRF where Referer validation depends on header being present
csrf where the site validates the Referer header only when it is present
Cross-site request forgery (CSRF) 2 min -
Medium
SameSite Strict bypass via sibling domain
cross site websocket hijacking blocked by a SameSite=Strict session cookie, bypassed by running the cswsh script on a sibling subdomain through its reflected login xss so the connection counts as same site
Cross-site request forgery (CSRF) 7 min -
Easy
SameSite Strict bypass via client-side redirect
csrf where the session cookie is SameSite=Strict, bypassed by abusing the site's own client side redirect and a path traversal on postId
Cross-site request forgery (CSRF) 4 min