Yujilik

Yujilik

[HackerNotes Ep.97] Bcrypt Hash Input Truncation & Mobile Device Threat Modeling

[HackerNotes Ep.97] Bcrypt Hash Input Truncation & Mobile Device Threat Modeling

We're back with some cool news items, including a recent Okta Bcrypt vulnerability, insights into crypto bugs, and some intricacies of Android and Chrome security. We also explore the latest research from Portswigger on payload concealment techniques, and the introduction of the Lightyear tool for PHP exploits.

Yujilik
Yujilik
[HackerNotes Ep.94] Zendesk Fiasco & the CTBB Naughty List

[HackerNotes Ep.94] Zendesk Fiasco & the CTBB Naughty List

In this week's HackerNotes, we dive into the recent Zendesk fiasco and the ethical considerations surrounding it. We also have the launch of AuthzAI and some research from Ophion Security.

Yujilik
Yujilik
[HackerNotes Ep.92] SAML XPath Confusion, Chinese DNS Poisoning, and AI-Powered 403 Bypasser

[HackerNotes Ep.92] SAML XPath Confusion, Chinese DNS Poisoning, and AI-Powered 403 Bypasser

This weeks HackerNotes has dropped covering a bunch of new research. We've got SAML XPath confusion, some AssetNote research,WAF bypasses and a whole lot more. Check it out below!

Yujilik
Yujilik