#hardcoding

Follow to get notified about new posts with this tag

cryptonvester

8y

How I could have pwned my highschool (SQLi, CSRF, Hardcoded Passwords & XSS) Part 2: Investigating the Breach

How I could have pwned my highschool (SQLi, CSRF, Hardcoded Passwords & XSS) Part 2: Investigating the Breach

Honestly, this is a blog title I’ve never expected to write, but hey, data breaches happen – no website is exempt from that. I will begin with a little bit of a backstory: I’ve found flaws in a website

$ 0.000

1

cryptonvester

8y

First blog post: How I could have pwned my highschool (SQLi, CSRF, Hardcoded Passwords & XSS)

First blog post: How I could have pwned my highschool (SQLi, CSRF, Hardcoded Passwords & XSS)

Introduction It happened. Someone told me a website was invulnerable. Coincidentally, since it also happened to belong to a highschool, I took it as a challenge, obtained permission to find flaws in it

$ 0.000

5