<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>web &#8211; SCRT Team Blog</title>
	<atom:link href="/tag/web/feed/" rel="self" type="application/rss+xml" />
	<link>/</link>
	<description>Orange Cyberdefense Switzerland&#039;s technical blog</description>
	<lastBuildDate>Thu, 26 Mar 2026 08:41:56 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>

<image>
	<url>/wp-content/uploads/2024/10/cropped-favicon-32x32-1-32x32.png</url>
	<title>web &#8211; SCRT Team Blog</title>
	<link>/</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>Insomni&#8217;hack 2022 &#8211; Apiculture 2 write-up</title>
		<link>/2022/03/29/apiculture-2-write-up/</link>
		
		<dc:creator><![CDATA[Frédéric Bourla]]></dc:creator>
		<pubDate>Tue, 29 Mar 2022 20:13:25 +0000</pubDate>
				<category><![CDATA[Insomni'hack]]></category>
		<category><![CDATA[api]]></category>
		<category><![CDATA[web]]></category>
		<guid isPermaLink="false">/?p=3378</guid>

					<description><![CDATA[The Apiculture challenges are dedicated to API attacks. The second level basically looks like a webpage dedicated to beehives: A quick look in the Developer Tools reveals a call to the /api/v4/products/ endpoint: This endpoint indeed permits to get the beehives JSON. It is also impacted by an Improper Data Filtering vulnerability since it contains &#8230; <a href="/2022/03/29/apiculture-2-write-up/" class="more-link">Continue reading <span class="screen-reader-text">Insomni&#8217;hack 2022 &#8211; Apiculture 2 write-up</span></a>]]></description>
		
		
		
			</item>
		<item>
		<title>Insomni&#8217;hack 2022 &#8211; Apiculture 1 write-up</title>
		<link>/2022/03/29/insomnihack-2022-apiculture-1-write-up/</link>
		
		<dc:creator><![CDATA[Frédéric Bourla]]></dc:creator>
		<pubDate>Tue, 29 Mar 2022 19:25:05 +0000</pubDate>
				<category><![CDATA[Insomni'hack]]></category>
		<category><![CDATA[api]]></category>
		<category><![CDATA[web]]></category>
		<guid isPermaLink="false">/?p=3358</guid>

					<description><![CDATA[The Apiculture challenges are dedicated to API attacks. It is basically a honey’s addict website: To solve the first challenge, we should pay attention to the call to the /api/products/ API: This endpoint provides information to the Angular front-end so that the page can be rendered in the browser… But it is impacted by an &#8230; <a href="/2022/03/29/insomnihack-2022-apiculture-1-write-up/" class="more-link">Continue reading <span class="screen-reader-text">Insomni&#8217;hack 2022 &#8211; Apiculture 1 write-up</span></a>]]></description>
		
		
		
			</item>
		<item>
		<title>Magento &#8211; RCE &#038; Local File Read with low privilege admin rights</title>
		<link>/2019/01/24/magento-rce-local-file-read-with-low-privilege-admin-rights/</link>
		
		<dc:creator><![CDATA[blogscrt]]></dc:creator>
		<pubDate>Thu, 24 Jan 2019 17:24:03 +0000</pubDate>
				<category><![CDATA[Vulnerability]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[web]]></category>
		<guid isPermaLink="false">/?p=2493</guid>

					<description><![CDATA[I regularly search for vulnerabilities on big services that allow it and have a Bug Bounty program. Here is a second paper which covers two vulnerabilities I discovered on Magento, a big ecommerce CMS that&#8217;s now part of Adobe Experience Cloud. These vulnerabilities have been responsibly disclosed to Magento team, and patched for Magento 2.3.0, &#8230; <a href="/2019/01/24/magento-rce-local-file-read-with-low-privilege-admin-rights/" class="more-link">Continue reading <span class="screen-reader-text">Magento &#8211; RCE &#038; Local File Read with low privilege admin rights</span></a>]]></description>
		
		
		
			</item>
		<item>
		<title>Abuser le filtre XSS pour faciliter une attaque de ClickJacking</title>
		<link>/2010/10/15/abuser-le-filtre-xss-pour-faciliter-une-attaque-de-clickjacking/</link>
					<comments>/2010/10/15/abuser-le-filtre-xss-pour-faciliter-une-attaque-de-clickjacking/#respond</comments>
		
		<dc:creator><![CDATA[Alain Mowat]]></dc:creator>
		<pubDate>Fri, 15 Oct 2010 14:01:31 +0000</pubDate>
				<category><![CDATA[Vulnerability]]></category>
		<category><![CDATA[clickjacking]]></category>
		<category><![CDATA[filtre]]></category>
		<category><![CDATA[web]]></category>
		<category><![CDATA[xss]]></category>
		<guid isPermaLink="false">/?p=138</guid>

					<description><![CDATA[Le clickjacking est une attaque relativement répandue visant les utilisateurs d&#8217;un site vulnérable X. L&#8217;idée est de faire cliquer l&#8217;utilisateur sur un endroit du site en question sans qu&#8217;il ne s&#8217;en rende compte. Le plus souvent, cela est fait en utilisant une iframe cachée sous la souris de l&#8217;utilisateur. Afin de contrer cette attaque, beaucoup &#8230; <a href="/2010/10/15/abuser-le-filtre-xss-pour-faciliter-une-attaque-de-clickjacking/" class="more-link">Continue reading <span class="screen-reader-text">Abuser le filtre XSS pour faciliter une attaque de ClickJacking</span></a>]]></description>
		
					<wfw:commentRss>/2010/10/15/abuser-le-filtre-xss-pour-faciliter-une-attaque-de-clickjacking/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
	</channel>
</rss>
