Web Hack List

Other nomination

Secret Web Hacking Knowledge: CTF Authors Hate These Simple Tricks

A CTF talk on unintended solutions whose novel finding is that exceeding PHP's parameter limit raises a warning before page code runs, so the server never sends headers such as CSP, Cache-Control or Content-Type. It also covers cookie theft across challenges on different ports of one host, cracking weakly encrypted archived sources, and outdated headless browsers.

Record

Researcher
Philippe Dourassov
Published by
download.scrt.ch
Date
Format
Recording

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Philippe Dourassov, first published at the original source. Preserved copies are kept so the citation survives its host.