December 13th, 2023 | 🕒
https://www.ispeech.org Dec 13, 2023NewsroomCryptocurrency / Threat Analysis Microsoft has warned that adversaries are using OAuth applications as an automation tool
August 21st, 2023 | 🕒
iSpeech From a user's perspective, OAuth works like magic. In just a few keystrokes, you can whisk through the account
March 2nd, 2023 | 🕒
Text to Speech submitted by /u/ynvb comments] Source link
February 27th, 2023 | 🕒
Text to Voice During a recent red team engagement, we found that the target organization used a well-known identity access
February 15th, 2023 | 🕒
Convert Text to Speech UPDATE: Email-only auth from 2012. Some great links on the same idea. It’s absolutely no news
February 14th, 2023 | 🕒
iSpeech.org Specially crafted “socket_id” parameter could get us a valid auth for any private Pusher channel of your application and
February 14th, 2023 | 🕒
iSpeech This is a story about how I found a way to generate unlimited amount of money on Starbucks gift
February 14th, 2023 | 🕒
iSpeech TL;DR There’s a subtle bug in BSON-ruby implementation, leading in best case scenario to low-severity DoS, but most likely
February 13th, 2023 | 🕒
iSpeech.org I’ve seen this code quite a few times in app/views: $.get(location.pathname+'?something'). It reads current pathname and requests it with
February 13th, 2023 | 🕒
iSpeech.org TL;DR because 2FA == password manager. 2FA, as many other things in infosec, is full of myths and stereotypes.
February 12th, 2023 | 🕒
iSpeech The Goal We want more offline web applications. A ToDo app, a Bitcoin wallet, a password manager - Javascript
February 12th, 2023 | 🕒
https://www.ispeech.org/text.to.speech You’re a bad guy and you just hacked a website. Normally you leak the database and leave. The owner
February 12th, 2023 | 🕒
Text to Speech Demo The iframe bug in No CAPTCHA was fixed long time ago, and now reCAPTCHA 2.0 is
February 11th, 2023 | 🕒
iSpeech.org TL;DR In this post I will demonstrate one of the numerous ways how ServiceWorkers let us execute Javascript code
Event Management 1.0 SQL Injection – Torchsec March 28, 2024 # Exploit Title: Event Management - SQL Injection# Application: Event… (11)WinRAR 6.22 Remote Code Execution – Torchsec March 29, 2024 ################################################################################################# Exploit Title : EXPLOIT WinRAR version 6.22 Vulnerability CVE-2023-38831… (8)Artica Proxy Unauthenticated PHP Deserialization… March 27, 2024 ### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule… (8)Siklu MultiHaul TG Series Credential Disclosure… March 29, 2024 # Exploit Title: Siklu MultiHaul TG series - unauthenticated credential… (8)
Gloss