Security Vux - VideoAndMovie

!

[P1] Business Logic - Subscription Purchased in Just 10rs (POC)

2:11

[P1] Business Logic - Subscription Purchased in Just 10rs (POC)

XSS BUG REPORT 🐞| HALL OF FAME | Techieey

0:44

XSS BUG REPORT 🐞| HALL OF FAME | Techieey

Insufficient workflow validation

2:27

Insufficient workflow validation

Flawed enforcement of business rules

1:55

Flawed enforcement of business rules

Inconsistent security controls

4:39

Inconsistent security controls

High level logic vulnerability

4:35

High level logic vulnerability

Excessive trust in client side controls

1:46

Excessive trust in client side controls

Authentication bypass via information disclosure

2:32

Authentication bypass via information disclosure

Source code disclosure via backup files

2:13

Source code disclosure via backup files

Information disclosure on debug page

1:18

Information disclosure on debug page

Information disclosure in error messages

2:48

Information disclosure in error messages

Developing a custom gadget chain for PHP deserialization

3:07

Developing a custom gadget chain for PHP deserialization

Arbitrary object injection in PHP

2:45

Arbitrary object injection in PHP

Modifying serialized data types

3:38

Modifying serialized data types

Modifying serialized objects

2:41

Modifying serialized objects

Web cache poisoning via a fat GET request

4:20

Web cache poisoning via a fat GET request

Parameter cloaking

6:48

Parameter cloaking

Web cache poisoning via an unkeyed query string

2:07

Web cache poisoning via an unkeyed query string

Web cache poisoning with multiple headers

4:31

Web cache poisoning with multiple headers

Web cache poisoning with an unkeyed cookie

2:52

Web cache poisoning with an unkeyed cookie

Web cache poisoning with an unkeyed header

3:26

Web cache poisoning with an unkeyed header

Username enumeration via subtly different responses

3:05

Username enumeration via subtly different responses

Password reset broken logic

3:13

Password reset broken logic

2FA simple bypass

1:38

2FA simple bypass

Username enumeration via different responses

5:45

Username enumeration via different responses

Referer based access control

1:30

Referer based access control

Multi step process with no access control on one step

2:40

Multi step process with no access control on one step

Method based access control can be circumvented

3:25

Method based access control can be circumvented

URL based access control can be circumvented

3:25

URL based access control can be circumvented

Insecure direct object references

2:47

Insecure direct object references