[B! xss][vulnerability] ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ishideo id:ishideo

xssã¨vulnerabilityã«é–¢ã™ã‚‹ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (66)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

Webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã‚ã‚‹ãã‹ãŸ
2024/10/5 YAPC::Hakodate 2024
ishideo 2024/10/07
vulnerability

headers

click-jacking

xss

csrf

sanitize

path-traversal

phishing

css-injection

dompurity
ãƒªãƒ³ã‚¯
GitHub - thecybertix/One-Liner-Collections: This Repositories contains list of One Liners with Descriptions and Installation requirements
ishideo 2024/07/01
onliner

bash

python

cli

recon

vulnerability

sqli

xss

github
ãƒªãƒ³ã‚¯
æ³¨ç›®ã—ãŸã„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã®è„†å¼±æ€§2é¸/ Security.Tokyo #3
Security.Tokyo #3ã®ç™ºè¡¨è³‡æ–™ã§ã™ã€‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã®ãƒ‘ã‚¹ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«ã¨ã€postMessageçµŒç”±ã®è„†å¼±æ€§ã‚’å–ã‚Šä¸Šã’ã¾ã—ãŸã€‚
ishideo 2024/03/10
client

slide

speakerdeck

javascript

xss

csrf

open-redirect

path-traversal

vulnerability

jwt
ãƒªãƒ³ã‚¯
Notion â€“ The all-in-one workspace for your notes, tasks, wikis, and databases.
ishideo 2024/01/26
vulnerability

pentest

threat

bypass

xss

checklist

sqli

open-redirect

notion
ãƒªãƒ³ã‚¯
GitHub - ReAbout/web-sec: WEBå®‰å…¨æ‰‹å†Œ(çº¢é˜Ÿå®‰å…¨æŠ€èƒ½æ ˆ)ï¼Œæ¼æ´žç†è§£ï¼Œæ¼æ´žåˆ©ç”¨ï¼Œä»£ç å®¡è®¡å’Œæ¸—é€æµ‹è¯•æ€»ç»“ã€‚ã€æŒç»æ›´æ–°ã€‘
ishideo 2023/09/06
web

xss

csrf

vulnerability

ssrf

sqli

xxe

webshell

github

chinese
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ä¿®ã€MIXI 23æ–°å’æŠ€è¡“ç ”ä¿®ã€‘
23æ–°å’æŠ€è¡“ç ”ä¿®ã§å®Ÿæ–½ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ä¿®ã®è¬›ç¾©è³‡æ–™ã§ã™ã€‚ è³‡æ–™ã®åˆ©ç”¨ã«ã¤ã„ã¦ å…¬é–‹ã—ã¦ã„ã‚‹è³‡æ–™ã¯å‹‰å¼·ä¼šã‚„ä¼æ¥ã®ç ”ä¿®ãªã©ã§è‡ªç”±ã«ã”åˆ©ç”¨é ‚ã„ã¦å¤§ä¸ˆå¤«ã§ã™ãŒã€ä»¥ä¸‹ã®å½¢ã§ã®åˆ©ç”¨ã ã‘ã”é æ…®ãã ã•ã„ã€‚ ãƒ»å—è¬›è€…ã‹ã‚‰å‚åŠ è²»ã‚„æŽˆæ¥æ–™ãªã©ã‚’é›†ã‚ã‚‹å½¢ã§ã®åˆ©ç”¨ï¼ˆä¼šå ´è²»ã‚„é£²é£Ÿè²»ãªã©â€¦
ishideo 2023/06/12
mixi

cybersecurity

slide

vulnerability

xss

sqli

api

cloud

speakerdeck
ãƒªãƒ³ã‚¯
GitHub - joe-shenouda/awesome-cyber-skills: A curated list of hacking environments where you can train your cyber skills legally and safely
ishideo 2023/04/14
awesome

list

xss

pentest

cybersecurity

vulnerability

threat

exploit

github
ãƒªãƒ³ã‚¯
BugBountyHunting.com - A community-curated Resource for Bug Bounty Hunting
ishideo 2023/01/04
bug-bounty

vulnerability

rce

ssrf

xss

sqli

idor

search
ãƒªãƒ³ã‚¯
GitHub - wonda-tea-coffee/security-tips
ishideo 2022/09/15
security

vulnerability

threat

xss

sqli

qiita

docker

github

awesome

list
ãƒªãƒ³ã‚¯
BSCPæ”»ç•¥ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆ
ishideo 2022/09/15
bscp

burp-suite

cheatsheet

vulnerability

xss

sqli

cors

web-cache-poisoning
ãƒªãƒ³ã‚¯
GitHub - sobinge/shadow2: æ¸—é€ è¶…å…¨é¢çš„æ¸—é€èµ„æ–™ðŸ’¯ åŒ…å«ï¼š0dayï¼Œxssï¼Œsqlæ³¨å…¥ï¼Œææƒâ€¦â€¦
ishideo 2022/08/08
shadow2

0day

xss

sqli

vulnerability

threat

github
ãƒªãƒ³ã‚¯
GitHub - twseptian/oneliner-bugbounty: oneliner commands for bug bounties
ishideo 2022/07/19
oneliner

bug-bounty

cli

xss

sqli

misconfiguration

ssrf

vulnerability

recon

github
ãƒªãƒ³ã‚¯
GitHub - nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters: A list of resources for those interested in getting started in bug bounties
ishideo 2021/10/13
nahamsec

resource

bug-bounty

vulnerability

xss

ssrf

github

security

pentest
ãƒªãƒ³ã‚¯
GitHub - Vanshal/Bug-Hunting: The aim of this Reposiotry is to Provide the Resoursces of Learning at one place For Bug Bounty Hunters.
ishideo 2021/10/04
bug-bounty

bug-hunting

vulnerability

xss

csrf

sqli

subdomain

takeover

github

rce
ãƒªãƒ³ã‚¯
The Bug Hunter's Methodology 2.0
ishideo 2021/09/08
bug-bounty

methodology

pentest

vulnerability

xss

sqli

youtube

jhaddix
ãƒªãƒ³ã‚¯
How To Shot Web - Jason Haddix's talk from DEFCON23
ishideo 2021/09/08
jhaddix

recon

methodology

osint

xss

sqli

csrf

vulnerability

youtube

bugcroud
ãƒªãƒ³ã‚¯
Exploiting Grafana
ishideo 2021/08/20
xmind

mindmap

grafana

cve-2020-11110

xss

cve-2019-15043

api

credential

cve-2020-13379

vulnerability
ãƒªãƒ³ã‚¯
Introduction | Book of BugBounty Tips
Hi , This book is a collection of "BugBounty" Tips tweeted / shared by community people. It includes the tweets I collected over the past from Twitter , Google and Hastags and chances that few tips may be missing. I have categorized tips against each vulnerability classification and "will be updating" regularly. Each tweet has link to original tweet to read about others replies / comments. Huge "T
ishideo 2021/05/21
gitbook

bug-bountry

tips

security

vulnerability

osint

xss

ssrf

csrf

rce
ãƒªãƒ³ã‚¯
React ã«ãŠã‘ã‚‹ XSSï½œReact ã¨ Vue ã«é–¢ã™ã‚‹ XSS ã‚¢ãƒ³ãƒãƒ‘ã‚¿ãƒ¼ãƒ³
ishideo 2021/05/11
react.js

xss

vulnerability

security

vue.js

zenn
ãƒªãƒ³ã‚¯
GitHub's CSP journey
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
ishideo 2021/04/28
github

csp

security

vulnerability

xss
ãƒªãƒ³ã‚¯
1 2 3 4 æ¬¡ã®ãƒšãƒ¼ã‚¸

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx