This is a pretty fun read on using a polyglot jpeg to bypass CSP leading to a XSS vuln.
http://blog.portswigger.net/2016/12/bypassing-csp-using-polyglot-jpegs.html
Forum Thread: Bypassing CSP with Polyglot JPGs
- Hot
- Active
-
Forum Thread:
How to Track Who Is Sms Bombing Me .
4
Replies
1 mo ago -
Forum Thread:
Removing Pay-as-You-Go Meter on Loan Phones.
1
Replies
2 mo ago -
Forum Thread:
Hydra Syntax Issue Stops After 16 Attempts
3
Replies
2 mo ago -
Forum Thread:
moab5.Sh Error While Running Metasploit
17
Replies
3 mo ago -
Forum Thread:
Execute Reverse PHP Shell with Metasploit
1
Replies
4 mo ago -
Forum Thread:
Install Metasploit Framework in Termux No Root Needed M-Wiz Tool
1
Replies
5 mo ago -
Forum Thread:
Hack and Track People's Device Constantly Using TRAPE
35
Replies
5 mo ago -
Forum Thread:
When My Kali Linux Finishes Installing (It Is Ready to Boot), and When I Try to Boot It All I Get Is a Black Screen.
8
Replies
6 mo ago -
Forum Thread:
HACK ANDROID with KALI USING PORT FORWARDING(portmap.io)
12
Replies
7 mo ago -
Forum Thread:
Hack Instagram Account Using BruteForce
208
Replies
7 mo ago -
Forum Thread:
Metasploit reverse_tcp Handler Problem
47
Replies
9 mo ago -
Forum Thread:
How to Train to Be an IT Security Professional (Ethical Hacker)
22
Replies
9 mo ago -
Metasploit Error:
Handler Failed to Bind
41
Replies
9 mo ago -
Forum Thread:
How to Hack Android Phone Using Same Wifi
21
Replies
10 mo ago -
How to:
HACK Android Device with TermuX on Android | Part #1 - Over the Internet [Ultimate Guide]
177
Replies
10 mo ago -
How to:
Crack Instagram Passwords Using Instainsane
36
Replies
10 mo ago -
Forum Thread:
How to Hack an Android Device Remotely, to Gain Acces to Gmail, Facebook, Twitter and More
5
Replies
10 mo ago -
Forum Thread:
How Many Hackers Have Played Watch_Dogs Game Before?
13
Replies
10 mo ago -
Forum Thread:
How to Hack an Android Device with Only a Ip Adress
55
Replies
11 mo ago -
How to:
Sign the APK File with Embedded Payload (The Ultimate Guide)
10
Replies
11 mo ago
-
How To:
Install Kali Linux as a Portable Live USB for Pen-Testing & Hacking on Any Computer
-
How To:
Set Up a Headless Raspberry Pi Hacking Platform Running Kali Linux
-
How To:
Build a Beginner Hacking Kit with the Raspberry Pi 3 Model B+
-
How to Hack Wi-Fi:
Getting Started with the Aircrack-Ng Suite of Wi-Fi Hacking Tools
-
How To:
Hack Facebook & Gmail Accounts Owned by MacOS Targets
-
How To:
Use Burp & FoxyProxy to Easily Switch Between Proxy Settings
-
How To:
Scan for Vulnerabilities on Any Website Using Nikto
-
Hack Like a Pro:
How to Find Directories in Websites Using DirBuster
-
How To:
Dox Anyone
-
How To:
Make Your Own Bad USB
-
How To:
Perform Advanced Man-in-the-Middle Attacks with Xerosploit
-
How To:
Buy the Best Wireless Network Adapter for Wi-Fi Hacking in 2019
-
Android for Hackers:
How to Turn an Android Phone into a Hacking Device Without Root
-
Tutorial:
Create Wordlists with Crunch
-
How To:
Use MDK3 for Advanced Wi-Fi Jamming
-
How To:
Detect When a Device Is Nearby with the ESP8266 Friend Detector
-
Hack Like a Pro:
How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite
-
How to Hack Wi-Fi:
Getting Started with Terms & Technologies
-
Hacking macOS:
How to Configure a Backdoor on Anyone's MacBook
-
Hack Like a Pro:
Getting Started with BackTrack, Your New Hacking System
1 Response
Cool! How could you upload it to a file managing website and trick it into running the image as JS?
Share Your Thoughts