skip to main
|
skip to sidebar
the world. according to koto
on security, malware, cryptography, pentesting, javascript, php and whatnots
No posts.
Show all posts
No posts.
Show all posts
Home
Subscribe to:
Posts (Atom)
Share
About me
See also
@kkotowicz
Google Plus profile
LinkedIn profile
GitHub account
My Google code projects
My e-commerce portfolio (Polish)
Search
Loading...
Tags
3des
access
ajax
analysis
android
bbcode
cache
captcha
clickjack
clickjacking
clone
closures
cracow
crockford
cryptography
csrf
datepicker
datetimeconvert
demo
denied
deployment
des
desede
dialog
diff
doctrine
e4x
ede
email
encryption
escape
eval
events
everonia
facebook
false
firebug
firefox
flickr
freetds
ftp
game
google
grep
hack
hardening
hijack
history
html
html5
http
ie
iframe
include
java
javascript
jquery
json
jsunpack
key
lint
load
log
magic quotes
malware
mdb2
modal
mssql
multiuser
mysql
new pix
niebezpiecznik
obfuscation
openssl
option
oracle
overloading
owasp
padding
parity
pear
phar
php
php5
pki
plugin
propel
python
readonly
referrer
refresh
regex
remote
rest
search
security
select
server
share
sidejacking
signing
sql injection
sqli
svn
symfony
tab
tabs
talk
tostring
track
training
tree
tripledes
tumblr
turing
ui
update
upload
utf7
video
webdav
websockets
wget
widget
window
xml
xss
youtube
zend framework
Archive
▼
2012
(1)
▼
January
(1)
Cursorjacking again
►
2011
(25)
►
December
(1)
Beatthis! oracle crypto xmas challenge
►
November
(3)
Geocommons.com admin account hijack
HTML5: Something wicked this way comes - HackPra m...
Google eBookstore content extraction
►
October
(4)
Piwik ≤ 1.5.1 multiple XSS vulnerabilities
Poor Princess Leia! Tumblr.com CSRF domain hijack
Stripping Referrer for fun and profit
The sad state of DOM security (or how we all ruled...
►
September
(1)
Minus.com silent arbitrary file upload
►
August
(2)
Death to the filters - how to validate JSON correc...
How not to implement CAPTCHAs (MotionCAPTCHA rant)...
►
July
(2)
Imgur.com session hijacking
Cross domain content extraction with fake captcha
►
June
(1)
File path injection in PHP ≤ 5.3.6 file upload (C...
►
May
(2)
Invisible arbitrary CSRF file upload in Flickr.com...
Cross domain arbitrary file upload Redux
►
April
(2)
How to upload arbitrary file contents cross-domain...
Filejacking: How to make a file server from your b...
►
March
(5)
How to Beathis! challenge - the solutions
A simple cryptoanalysis challenge
Who's behind Facebook clickjacking scams?
Exploiting the unexploitable XSS with clickjacking...
HTML5 WebSockets - security & new tool for attacki...
►
January
(2)
How to get SQL query contents from SQL injection f...
XSS-Track as a HTML5 WebSockets traffic sniffer
►
2010
(30)
►
December
(3)
"Hacking HTML5" training
Squid-imposter: Phishing websites forever with HTM...
XSS-Track now steals your uploaded files with HTML...
►
November
(2)
XSS track got ninja stealth skills thanks to HTML5...
XSS-Track: How to quietly track a whole website th...
►
October
(6)
XSS hackme challenge solution (part 2)
Dont-Text.tk - First Facebook scam with clickjacki...
Dont-Text.info / FightingGuy.info facebook worm - ...
XSS hackme challenge solution (part 1)
Test your skills with this XSS hackme (rev. 2)
Serious security flaws in Facebook revealed today
►
September
(4)
BBCode won't protect you from XSS
"The Hottest girls on Facebook" everonia.com malwa...
The story of Android, cryptography and a crippled ...
Creating, obfuscating and analyzing malware JavaSc...
►
August
(2)
MakeMeLaughNow - analysis of new generation facebo...
Hardening PHP: How to securely include remote code...
►
July
(2)
Hardening PHP: How to securely include remote code...
Hardening PHP: How to securely include remote code...
►
June
(3)
Ultimate toString() override
Malicious Javascript talk - materials
Save your data from SQL injection - materials
►
May
(3)
Incoming lectures on malware and on SQL injection
Deobfuscating PHP scripts with evalhook
►
April
(3)
►
March
(2)
►
2009
(9)
►
December
(2)
►
October
(1)
►
September
(3)
►
March
(3)
Fresh from delicious.com/koto
Loading...
Subscribe
Posts
Atom
Posts
All Comments
Atom
All Comments