Escaping Docker Privileged Containers
Why you should not run Docker with the “privileged” flag.
Recent posts
Are CSRFs Still a Thing?
What SameSite by default means for the future of CSRFs.
Bypassing CSRF Protection
Protection exists != not exploitable. No matter the obstacles, we’re gonna CSRF.
Attacking Sites Using CSRF
From CSRF to user information leak, XSS and full account takeover.
Intro to CSRF: Cross-Site Request Forgery
To change your password, password not required!
Proxying Like a Pro
Using ProxyChains to proxy your Internet traffic.
Discovering The Hidden Web
How To Perform Pentest Recon Using GoBuster.
Wireshark in the Command Line
Learning to use Wireshark’s Command Line Tool: TShark