Viewing profile — cujanovic

cujanovic

HN member

Joined: Thu, Aug 27, 2015, 12:53 PM UTC
HN karma: 1,563
Public activity: 220 items
HN profile: View on Hacker News ↗

About cujanovic

[ my public key: https://keybase.io/cujanovic; my proof: https://keybase.io/cujanovic/sigs/W9oZKA5fojzlzTwjzAEMWa5EacA5HaHFVCOAWhusJsk ]

Recent public activity

comment
Comment #20470874
https://www.netsparker.com/whitepaper-http-security-headers/

Thu, Jul 18, 2019, 3:33 PM UTC
story
Abusing Enclosed Alphanumerics for SSRF
http://169。254。169。254/ http://169｡254｡169｡254/ http://⑯⑨。②⑤④。⑯⑨｡②⑤④/ http://⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ｡⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ:80/ http://⓪ⓧⓐ⑨ⓕⓔⓐ⑨ⓕⓔ:80/ http://②⑧⑤②⓪③⑨①⑥⑥:80/ http://④②⑤｡⑤①⓪｡④②⑤｡⑤①⓪:80/ http://⓪…

Thu, Nov 23, 2017, 12:28 PM UTC
comment
Comment #15653044
This is vulnerable to XSS, payload: [Click Me](javascript:this;alert(document.domain))

Wed, Nov 08, 2017, 3:03 PM UTC
story
SSRF (Server Side Request Forgery) Testing Resources
Wed, Sep 13, 2017, 10:18 AM UTC
story
Open Redirect Payloads
Thu, Jul 06, 2017, 10:36 AM UTC
story
SSRF Testing resources – tools and links to help you test for SSRF in web apps
Mon, Jun 05, 2017, 6:40 PM UTC
story
How I Hacked My Smart TV from My Bed via a Command Injection
Fri, Apr 07, 2017, 10:02 AM UTC
story
CVE-2016-8610 (SSL Death Alert) PoC
Tue, Dec 27, 2016, 1:26 PM UTC
story
The State of Wordpress Security
Thu, Dec 15, 2016, 9:27 AM UTC
story
Backslash Powered Scanning: Hunting Unknown Vulnerability Classes
Mon, Nov 07, 2016, 1:55 PM UTC
story
Linux containers in 500 lines of code
Wed, Nov 02, 2016, 12:05 PM UTC
story
CSRF protection bypass on any Django powered site via Google Analytics
Tue, Sep 27, 2016, 10:28 AM UTC
story
How I gained access to TMobile’s national network for free
Mon, Sep 19, 2016, 10:21 AM UTC
story
Nginx resolver vulnerabilities allow cache poisoning attack
Tue, Aug 30, 2016, 2:00 PM UTC
story
How I Could Have Hacked Multiple Facebook Accounts
Fri, Aug 26, 2016, 10:14 AM UTC
story
Vulnerability in the Linux kernel's tcp stack implementation
Thu, Aug 11, 2016, 3:14 PM UTC
story
The Imperva HTTP/2 Vulnerability Report and NGINX
Mon, Aug 08, 2016, 11:34 AM UTC
story
How to steal any developer's local database
Thu, Aug 04, 2016, 2:24 PM UTC
story
HTTP/2: Faster and better than HTTP 1.1, but is it more secure? [pdf]
Wed, Aug 03, 2016, 9:07 PM UTC
story
Mr Robot S02E01 easter egg
Thu, Jul 14, 2016, 9:00 AM UTC
story
Firefox – Same-Origin Policy Bypass (CVE-2015-7188)
Wed, Jul 06, 2016, 10:48 AM UTC
story
Debian Exim Spool Local Root
Thu, Jun 30, 2016, 9:37 AM UTC
story
Auditing CSP Headers with Burp and ZAP
Wed, Jun 29, 2016, 10:07 AM UTC
story
XSS and WordPress – The Aftermath
Tue, Jun 28, 2016, 1:40 PM UTC
story
Nginx: Supporting HTTP/2 for Google Chrome Users
Wed, Jun 08, 2016, 11:50 AM UTC