はてなブックマーク

Cure53 offers classic black-box penetration tests (zero-knowledge) as well as white-box tests and code audits. Web application and mobile app developers speak many languages and so do we. From classic languages as PHP, JavaScript, ActionScript, Java, Ruby, Python and Perl to more exotic candidates like web back-ends written in C++ and Delphi – we've seen them. During our assignments we appreciate

Welcome to the Cure53 XSS-Mas Challenge 2014 This challenge is cruel and nasty and tricky and hard to solve. But it doesn't require you to know any browser bugs or alike. There's several pieces you have to put together. And several mini-tasks you have to solve. And you have to keep your payload short. No exclusive knowledge is required, all tricks are either part of some standard or well-known. So