7ASecurity

7ASecurity

2 Follower

1-10 Mitarbeitende

Neuigkeiten

Alle Neuigkeiten

7ASecurityhat einen Beitrag geschrieben.21. April 2022

Proper #XSS hacking (new vector)! Just like the old days @garethheyes https://portswigger.net/research/new-xss-vectors

7ASecurityhat einen Beitrag geschrieben.12. April 2022

Nginx #0Day RCE issue by @_Blue_hornet leaked! #Nginx releases advisory https://github.com/AgainstTheWest/NginxDay

GitHub - AgainstTheWest/NginxDay: Nginx 18.1 04/09/22 zero-day repo

Nginx 18.1 04/09/22 zero-day repo. Contribute to AgainstTheWest/NginxDay development by creating an account on GitHub.github.com

7ASecurityhat einen Beitrag geschrieben.6. April 2022

Tired of #XSS vectors that no longer work to bypass WAFs & filters in web apps? @PortSwiggerRes just updated their XSS cheat sheet: new browser tricks & no obsolete payloads! #pentest #hacking #infosec https://portswigger.net/web-security/cross-site-scripting/cheat-sheet

Cross-Site Scripting (XSS) Cheat Sheet - 2026 Edition | Web Security Academy

Interactive cross-site scripting (XSS) cheat sheet for 2026, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors.portswigger.net

7ASecurityhat einen Beitrag geschrieben.1. April 2022

Looks interesting! Nmap for shodan.io! Did anybody try this? by @s0md3v -> github.com/s0md3v/Smap ▶️1 request x host + No shodan account required ▶️Works like nmap, same CLI args ▶️Gives you CVEs

7ASecurityhat einen Beitrag geschrieben.30. März 2022

Using Spring Framework & JDK 9.0+? 0day #RCE #vulnerability https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html https://www.springcloud.io/post/2022-03/spring-0day-vulnerability/#gsc.tab=0

7ASecurityhat einen Beitrag geschrieben.30. März 2022

Pretty cool write up about finding a new #RCE gadget in latest #Rails (7) framework! https://github.com/httpvoid/writeups/blob/main/Ruby-deserialization-gadget-on-rails.md

writeups/Ruby-deserialization-gadget-on-rails.md at main · httpvoid/writeups

Contribute to httpvoid/writeups development by creating an account on GitHub.github.com

7ASecurityhat einen Beitrag geschrieben.25. März 2022

🔥Free Online Workshop on RCE in #NodeJS apps ⏰ 21 April 🕸️Hacking Modern Web apps with RCE and Prototype Pollution Get: 👉Lifetime access: vuln apps, guided exercise pdf & video 🎁Certificate of Attendance ➕Join us: https://forms.gle/qMEHfTNZTVgAxnVBA ⏩Can't come? https://7asecurity.com/free-workshop-web-apps

Free Workshop: Hacking Modern Web apps with RCE and Prototype Pollution

Date: April 22st, 2022 Time: 18:00 CEST - 19:00 CEST Contact us: admin@7asecurity.comdocs.google.com

7ASecurityhat einen Beitrag geschrieben.23. März 2022

📢Last call! 🌪️𝗙𝗿𝗲𝗲 𝗪𝗼𝗿𝗸𝘀𝗵𝗼𝗽 *Practical Mobile App Attacks by Example* with @7aSecurity & @_JohnHammond live on March 31 👉Join now https://forms.gle/tERJ2kHcbMgxi6JQA 🚀Can't wait https://7asecurity.com/free-workshop-mobile-practical #Pentesting #cybersecurity

7ASecurityhat einen Beitrag geschrieben.15. März 2022

Do you need inspiration to bypass a WAF? Lots of bypasses & tools here! pretty cool: https://waf-bypass.com/ #websecurity #pentesting

Web application firewalls bypasses collection and testing tools – How to test, evaluate, compare, and bypass web application and API security solutions like WAF, NGWAF, RASP, and WAAP

Web application firewalls bypasses collection and testing tools. How to test, evaluate, compare, and bypass web application and API security solutions like WAF, NGWAF, RASP, and WAAP.waf-bypass.com

7ASecurityhat einen Beitrag geschrieben.11. März 2022

🇷🇺 Dept of Media Censorship #hacking by #AnonymousUkraine https://www.jpost.com/breaking-news/article-700940 820GB & 360,000 files of Russian docs, here: https://old.reddit.com/r/worldnews/comments/tb53cr/anonymous_hacks_russian_federal_agency_releases/

Anonymous hacks Russian federal agency, releases 360,000 documents | The Jerusalem Post

Documents released by the hacking group show that Russia is censoring the narrative regarding its role in its war with Ukraine.www.jpost.com

Alle Neuigkeiten

XING empfiehlt folgende Unternehmen:

SECUINFRA GmbH

Oneconsult AG

CYQUEO

Über uns

Alle Infos ansehen

7ASecurity offers Quality Pentests and Code Audits of Web, Mobile and Desktop apps. We also perform Internal and External Penetration Tests. Founded by Abraham Aranguren and operating since 2011, 7ASecurity is EU-based and GDPR-aware. We have experience testing small companies, NGOs, open source projects as well as some of...

Alle Infos ansehen