One of the issues with finding bugs is that so many other people are using automated tools to find the same bugs. Well, I have found a new type of vulnerability that almost no one is looking for yet which means there is a good chance you all can find it. You would have to really understand Relative Path Overwrite and be prepared to make a case with these companies as no one will no what it is yet. The new technique is called Relative Path File Injection. Here is my blog. Both Gareth and James from Portswigger shared it to their followers on LinkedIn. Feel free to go verify that. Leave comments on the blog if you need help with something but I do tend to be pretty busy. I will add a GitHub repo at some point to help people better understand it. Happy hunting. submitted by /u/ihickey
[link] [comments]
http://dlvr.it/T6myVH
';
(function() {
var dsq = document.createElement('script'); dsq.type = 'text/javascript'; dsq.async = true;
dsq.src = '//' + disqus_shortname + '.disqus.com/embed.js';
(document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(dsq);
})();
No comments:
Post a Comment