GitHub - sharathunni/security_whitepapers: Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

Security whitepapers

Name		Name	Last commit message	Last commit date
Latest commit History 88 Commits
Beej's Guide to Network Programming_files		Beej's Guide to Network Programming_files
cheatsheets		cheatsheets
sample_pentest_reports		sample_pentest_reports
zines		zines
10_yrs_of_Java_exploitation.pdf		10_yrs_of_Java_exploitation.pdf
ARM_assembly_shellcode_lab_by_Azeria.pdf		ARM_assembly_shellcode_lab_by_Azeria.pdf
ASLR.pdf		ASLR.pdf
ASLR_practical_cache_attacks.pdf		ASLR_practical_cache_attacks.pdf
Alternative_for_Information_Schema.Tables_in_MySQL.pdf		Alternative_for_Information_Schema.Tables_in_MySQL.pdf
Asia-14-Nafeez-JS-Suicide-Using-JavaScript-Security-Features-To-Kill-JS-Security.pdf		Asia-14-Nafeez-JS-Suicide-Using-JavaScript-Security-Features-To-Kill-JS-Security.pdf
Automatic_Heap_Layout_Manipulation_for_Exploitation.pdf		Automatic_Heap_Layout_Manipulation_for_Exploitation.pdf
BH_US_12_Serna_Leak_Era_Slides.pdf		BH_US_12_Serna_Leak_Era_Slides.pdf
BSidesAth16_Perform_Effective_Command_Injection_Attacks_Like_Mr.Robot_Final.pdf		BSidesAth16_Perform_Effective_Command_Injection_Attacks_Like_Mr.Robot_Final.pdf
Beej's Guide to Network Programming.html		Beej's Guide to Network Programming.html
Breaking-SAP-Portal-2012-HackerHalted.pdf		Breaking-SAP-Portal-2012-HackerHalted.pdf
Brute_advanced-xss.pdf		Brute_advanced-xss.pdf
CSP_Google_Research.pdf		CSP_Google_Research.pdf
CSRF-whitepaper.pdf		CSRF-whitepaper.pdf
CVE-2018-4242.pdf		CVE-2018-4242.pdf
Character Entity Reference Chart.html		Character Entity Reference Chart.html
Code-Reuse_Attacks_for_the_Web.pdf		Code-Reuse_Attacks_for_the_Web.pdf
Content_SEcuroty_Policy_insecurity.pdf		Content_SEcuroty_Policy_insecurity.pdf
Cracking_Salted_Hashes.pdf		Cracking_Salted_Hashes.pdf
D2T3-Using-Javascript-Security-Features-to-Kill-Itself.pdf		D2T3-Using-Javascript-Security-Features-to-Kill-Itself.pdf
DEFCON-24-Regilero-Hiding-Wookiees-In-Http.pdf		DEFCON-24-Regilero-Hiding-Wookiees-In-Http.pdf
DKMC presentation 2017.pdf		DKMC presentation 2017.pdf
Defense-in-depth_techniques_for_modern_web_applications.pdf		Defense-in-depth_techniques_for_modern_web_applications.pdf
Deserialization - What Could Go Wrong.pdf		Deserialization - What Could Go Wrong.pdf
DetectingKernelMemoryDisclosure_MateuszJurczyk_GP0.pdf		DetectingKernelMemoryDisclosure_MateuszJurczyk_GP0.pdf
ESAPI4JS-Marcus.Niemietz.pdf		ESAPI4JS-Marcus.Niemietz.pdf
Evading All Web-Application Firewalls XSS Filters.pdf		Evading All Web-Application Firewalls XSS Filters.pdf
Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf		Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf
Exploiting_the_unexploitable.pdf		Exploiting_the_unexploitable.pdf
Exposing_Spies_on_macOS.pdf		Exposing_Spies_on_macOS.pdf
File-in-the-hole.pdf		File-in-the-hole.pdf
HTML5_AttackVectors_RafayBaloch_UPDATED.pdf		HTML5_AttackVectors_RafayBaloch_UPDATED.pdf
HTML5_Hacking_Websocket_Slides.pdf		HTML5_Hacking_Websocket_Slides.pdf
HTTP2_flaws_analysis.pdf		HTTP2_flaws_analysis.pdf
HTTP_PARAMETER_POLLUTION_AppsecEU09_CarettoniDiPaola_v0.8.pdf		HTTP_PARAMETER_POLLUTION_AppsecEU09_CarettoniDiPaola_v0.8.pdf
HTTP_PARAMETER_POLUTION.jpg		HTTP_PARAMETER_POLUTION.jpg
Http Parameter Contamination - Ivan Markovic NSS.pdf		Http Parameter Contamination - Ivan Markovic NSS.pdf
Hunting-postMessage-Vulnerabilities.pdf		Hunting-postMessage-Vulnerabilities.pdf
IPv4_Subnetting.pdf		IPv4_Subnetting.pdf
Introduction_to_socket_programming_C.pdf		Introduction_to_socket_programming_C.pdf
JAVA_serializations_attacks.pdf		JAVA_serializations_attacks.pdf
JOOMLA_pentesting_joomla.pdf		JOOMLA_pentesting_joomla.pdf
JSON_Web_Token_handbook.pdf		JSON_Web_Token_handbook.pdf
JavaScript_prototype_pollution_attack_in_NodeJS.pdf		JavaScript_prototype_pollution_attack_in_NodeJS.pdf
JustGotPWND.pdf		JustGotPWND.pdf
LFI With PHPInfo Assistance.pdf		LFI With PHPInfo Assistance.pdf
LFI-to-RCE.txt		LFI-to-RCE.txt
LFI_testing_techniques.pdf		LFI_testing_techniques.pdf
MSSQL_SLQInjection_cheatsheet.txt		MSSQL_SLQInjection_cheatsheet.txt
Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques_English.pdf		Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques_English.pdf
MySQL-UDF-Exploitation.pdf		MySQL-UDF-Exploitation.pdf
MySQL_SLQInjection_cheatsheet.txt		MySQL_SLQInjection_cheatsheet.txt
NTLM_Auth_Protocol_spec.pdf		NTLM_Auth_Protocol_spec.pdf
Not So Random - Exploiting Unsafe Random Number Generator Use.pdf		Not So Random - Exploiting Unsafe Random Number Generator Use.pdf
OSCP_survival_guide.md		OSCP_survival_guide.md
OWASPLondon20161124_JSON_Hijacking_Gareth_Heyes.pdf		OWASPLondon20161124_JSON_Hijacking_Gareth_Heyes.pdf
Oracle_SLQInjection_cheatsheet.txt		Oracle_SLQInjection_cheatsheet.txt
Orange_Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf		Orange_Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf
PHP_LFI_rfc1867_temporary_files.pdf		PHP_LFI_rfc1867_temporary_files.pdf
PHP_TypeJuggling.pdf		PHP_TypeJuggling.pdf
PHP_object_injection.pdf		PHP_object_injection.pdf
PenTest_Using_Dangerous_HTTP_Methods_SANS.pdf		PenTest_Using_Dangerous_HTTP_Methods_SANS.pdf
PosgreSQL_SLQInjection_cheatsheet.txt		PosgreSQL_SLQInjection_cheatsheet.txt
README.md		README.md
RE_for_beginners-en.pdf		RE_for_beginners-en.pdf
RE_with_ImmunityDebugger.pdf		RE_with_ImmunityDebugger.pdf
RIPS_PHP_Security_Calendar_2017.md		RIPS_PHP_Security_Calendar_2017.md
Reflected-File-Download-a-New-Web-Attack-Vector-wp.pdf		Reflected-File-Download-a-New-Web-Attack-Vector-wp.pdf
SHA.pdf		SHA.pdf
SHAttered.pdf		SHAttered.pdf
SQLi_Insert.pdf		SQLi_Insert.pdf
SQLite_injections.pdf		SQLite_injections.pdf
SSRFbible.Cheatsheet.pdf		SSRFbible.Cheatsheet.pdf
Same_Origin_Method_Execution__paper.pdf		Same_Origin_Method_Execution__paper.pdf
ServerSideTemplateInjection.pdf		ServerSideTemplateInjection.pdf
ShockingNewsInPHPExploitation_StefanEsser_2009.pdf		ShockingNewsInPHPExploitation_StefanEsser_2009.pdf
So_we_broke_all_CSPs..._You_won_t_guess_what_happened_next_.pdf		So_we_broke_all_CSPs..._You_won_t_guess_what_happened_next_.pdf
Speculative_Buffer_Overflows_Attacks_and_Defenses_spectre1.1.pdf		Speculative_Buffer_Overflows_Attacks_and_Defenses_spectre1.1.pdf
Standards and tools for exchange and processing of actionable information.pdf		Standards and tools for exchange and processing of actionable information.pdf
Synode_TR_Nov2016.pdf		Synode_TR_Nov2016.pdf
The_BountyHunter_Methodology_by_JHaddix_v3.pdf		The_BountyHunter_Methodology_by_JHaddix_v3.pdf
Understanding_the_fundamentals_of_attacks.pdf		Understanding_the_fundamentals_of_attacks.pdf
WAF_Bypassing_By_RAFAYBALOCH.pdf		WAF_Bypassing_By_RAFAYBALOCH.pdf
WebDav_vulns_hacking_Mikhail_Egorov.pdf		WebDav_vulns_hacking_Mikhail_Egorov.pdf
WindowsPost-Exploitation.pdf		WindowsPost-Exploitation.pdf
Windows_command_reference.pdf		Windows_command_reference.pdf
X41-Browser-Security-White-Paper.pdf		X41-Browser-Security-White-Paper.pdf
XMLDTDEntityAttacks.pdf		XMLDTDEntityAttacks.pdf
XSSI_The_Unexpected_Dangers_of_Dynamic_JavaScript.pdf		XSSI_The_Unexpected_Dangers_of_Dynamic_JavaScript.pdf
Xpath-attacks.pdf		Xpath-attacks.pdf
abusing-kerberos---kerberoasting.pdf		abusing-kerberos---kerberoasting.pdf
advanced_xss_and_csrf_tomnomnom.pdf		advanced_xss_and_csrf_tomnomnom.pdf
apple-safari-wasm-section-vuln-write-up-2018-04-16.pdf		apple-safari-wasm-section-vuln-write-up-2018-04-16.pdf
appseceu_2018-modern-web-technologies-fransrosen.pdf		appseceu_2018-modern-web-technologies-fransrosen.pdf
appseceu_2018_wafbypass_soroush_dalili.pdf		appseceu_2018_wafbypass_soroush_dalili.pdf
assembly_tutorial.pdf		assembly_tutorial.pdf

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Repository files navigation

About

Releases

Packages

Languages

sharathunni/security_whitepapers

Folders and files

Latest commit

History

Repository files navigation

About

Resources

Stars

Watchers

Forks

Releases

Packages 0

Languages

Packages