Saturday, March 30, 2013

Amplifying DDoS data volume by using spoofed UDP packets

›
Recently Spamhaus and Cloudflare was hit by a massive DDoS attack. Where the 300Gbits/s is impressive, it is worth mentioning that situa...
3 comments:
Monday, February 4, 2013

Joomla vulnerability transforms web pages into ddosing tools?

›
In my very first post I've described PHP unserialize function and what are dangers of using it. During my research I've found out...
11 comments:
Wednesday, January 9, 2013

Firefox 18 with new IonMonkey JIT has landed, but...

›
Yesterday Mozilla released Firefox 18. The main improvement is new JIT compiler called IonMonkey (release note you can find here ). Sadl...
Friday, January 4, 2013

Wstrzykiwanie kodu html na stronę NFZ

›
Niewystarczająca filtracja (usuwanie tylko frazy script) w parametrze slowo w skrypcie new/tagi.php powoduje, że poprzez manipulację tego pa...
1 comment:
Thursday, January 3, 2013

Facebook: sending messages to strangers (non friends) for free or/and spoofing sender

›
Facebook tests paid messages to strangers. How much would you pay to contact a stranger? Well, actually you can do it for free . In case if ...
2 comments:
Wednesday, December 5, 2012

PHP: niebezpieczeństwa związane z funkcją unserialize, czyli PHP Object Injection

›
Wstęp Pisząc jakąkolwiek aplikację, jedną z podstawowych zasad których programista musi się trzymać to nie ufać danym wprowadzanych przez...
1 comment: