keneno

Full stack software engineer @alxswe || Data analyst @worldquant

[keneno @keneno8]

@KevinNaughtonJr @grok answer this

[keneno @keneno8]

I completed the Web Security Academy lab:
OS command injection, simple case

@WebSecAcademy
https://t.co/HFyJkojTRu

[keneno @keneno8]

I completed the Web Security Academy lab:
User ID controlled by request parameter with password disclosure

@WebSecAcademy
https://t.co/lh3pBjoppP

[keneno @keneno8]

I completed the Web Security Academy lab:
User ID controlled by request parameter, with unpredictable user IDs

@WebSecAcademy
https://t.co/0L0rs6FgfQ

[keneno @keneno8]

I completed the Web Security Academy lab:
User role controlled by request parameter

@WebSecAcademy
https://t.co/O5qQ70iIhi

[keneno @keneno8]

I completed the Web Security Academy lab:
Unprotected admin functionality with unpredictable URL

@WebSecAcademy
https://t.co/0V8U3qX7Iv

[keneno @keneno8]

I completed the Web Security Academy lab:
Unprotected admin functionality

@WebSecAcademy
https://t.co/G61xXLkXyl

[keneno @keneno8]

I completed the Web Security Academy lab:
Bypassing flawed input filters for server-side prototype pollution

@WebSecAcademy
https://t.co/iR78CFLM5d

[keneno @keneno8]

I completed the Web Security Academy lab:
Detecting server-side prototype pollution without polluted property reflection

@WebSecAcademy
https://t.co/tzZan4nSKx

[keneno @keneno8]

I completed the Web Security Academy lab:
Privilege escalation via server-side prototype pollution

@WebSecAcademy
https://t.co/pcQyJP0PEh

[keneno @keneno8]

I completed the Web Security Academy lab:
Client-side prototype pollution via browser APIs

@WebSecAcademy
https://t.co/PFgFCSufQr

[keneno @keneno8]

I completed the Web Security Academy lab:
Client-side prototype pollution in third-party libraries

@WebSecAcademy
https://t.co/Xa3AerLwhm

[keneno @keneno8]

I completed the Web Security Academy lab:
Client-side prototype pollution via flawed sanitization

@WebSecAcademy
https://t.co/cX7WCLqlte

[keneno @keneno8]

I completed the Web Security Academy lab:
DOM XSS via an alternative prototype pollution vector

@WebSecAcademy
https://t.co/GdlmpseXQI

[keneno @keneno8]

I completed the Web Security Academy lab:
DOM XSS via client-side prototype pollution

@WebSecAcademy
https://t.co/cyTdwknOEf

[keneno @keneno8]

I completed the Web Security Academy lab:
Exploiting cache server normalization for web cache deception

@WebSecAcademy
https://t.co/JZiVs0Xryt

[keneno @keneno8]

I completed the Web Security Academy lab:
Exploiting path mapping for web cache deception

@WebSecAcademy
https://t.co/3uSafx9NkI

[keneno @keneno8]

I completed the Web Security Academy lab:
Remote code execution via polyglot web shell upload

@WebSecAcademy
https://t.co/4Vd9BsfqXd

[keneno @keneno8]

I completed the Web Security Academy lab:
Web shell upload via obfuscated file extension

@WebSecAcademy
https://t.co/NGCp73wmJG

[keneno @keneno8]

I completed the Web Security Academy lab:
Web shell upload via extension blacklist bypass

@WebSecAcademy
https://t.co/wlM65NZQAy