Re-visiting JAVA De-serialization: It can't get any s... - 惯性聚合

推荐订阅源

The GitHub Blog

阮一峰的网络日志

钛媒体：引领未来商业与生活新知

Apple Machine Learning Research

博客园 - 司徒正美

Last Week in AI

罗磊的独立博客

奇客Solidot–传递最新科技情报

freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More

博客园_首页

OSCHINA 社区最新新闻

The Cloudflare Blog

让小产品的独立变现更简单 - ezindie.com

WordPress大学

人人都是产品经理

博客园 - 叶小钗

宝玉的分享

Tailwind CSS Blog

Attack and Defense Labs

Cracking hashes in the JavaScript cloud with Ravan Performing DDoS attacks with HTML5 Cross Origin Requests & WebWorkers Port Scanning with HTML5 and JS-Recon RSnake, Web Security and a few beers HTML5 goodness at BlackHat Abu Dhabi this week XSSing client-side dynamic HTML includes by hiding HTML inside images and more Stealing entire Auto-Complete data in Google Chrome Shell of the Future – Reverse Web Shell Handler for XSS Exploitation Chrome and Safari users open to stealth HTML5 AppCache attack HTML5 Security Articles and Live Demos Attacking JAVA Serialized Communication: BH EU 2010 Stroke triggered XSS and StrokeJacking New technique to be released for Attacking JAVA Serialized Communication at Black Hat Europe 2010 Bypassing CSRF protections with ClickJacking and HTTP Parameter Pollution Imposter and Whitepapers released The Goan NullCon Hangover The ClubHack 2009 hangover Stealing Databases and Setting Backdoors on Google Gears Breaking the Browser Sandbox and stealing some files Browser Phishing Explained The SecurityByte and OWASP AppSec Asia 2009 hangover Lust 2.0 talk @ SecurityByte and OWASP AppSec Asia 2009

Re-visiting JAVA De-serialization: It can't get any s...

Manish S. · 2010-09-08 · via Attack and Defense Labs

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。原文来自 — 版权归原作者所有。