diff --git a/README.md b/README.md index 4c10b73..bd5b833 100644 --- a/README.md +++ b/README.md @@ -723,11 +723,15 @@ _return-to-libc techniques_ - [List of bug bounty writeups](List of bug bounty writeups) - [The 2018 Guide to Building Secure PHP Software](https://paragonie.com/blog/2017/12/2018-guide-building-secure-php-software) -#### Web Application Security: CORS +#### Web Application Security: Technique: CORS - [Advanced CORS Exploitation Techniques](https://www.sxcurity.pro/advanced-cors-techniques/) - [Exploiting CORS misconfigurations for Bitcoins and bounties](https://portswigger.net/blog/exploiting-cors-misconfigurations-for-bitcoins-and-bounties) +#### Web Application Security: DNS Rebinding + +- [Attacking Private Networks from the Internet with DNS Rebinding](https://medium.com/@brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325) + #### Web Application Security: Technique: Cross-site Request Forgery - [What is CSRF , Preventions? And How to bypass the CSRF protection via XSS?](https://medium.com/@agrawalsmart7/what-is-csrf-how-to-bypass-the-csrf-protection-via-xss-55695f5789d7)