11P by xguru 2022-02-11 | favorite | 댓글과 토론

* 21년에 발표된 웹 보안 연구 논문들 중에서 Top10을 선정
10. Fuzzing for XSS via nested parsers
9. HTTP Smuggling via Higher HTTP Versions
8. Practical HTTP Header Smuggling
7. JSON Interoperability Vulnerabilities
6. Cache Poisoning at Scale
5. Hidden OAuth attack vectors
4. Exploiting Client-Side Prototype Pollution in the wild
3. A New Attack Surface on MS Exchange
2. HTTP/2: The Sequel is Always Worse
1. Dependency Confusion