Un informático en el lado del mal: Connection String Parameter Pollution

viernes, septiembre 18, 2009

Connection String Parameter Pollution

Mi charla en la Ekoparty ya terminó, y a pesar de los problemas de garganta conseguí llevarla a término tal y como tenía planeado y sin que el portátil me diera ningún pete.

Esta son las slides de la sesión, pero durante las próxima semana publicaremos un artíuclo muy largo sobre este tema... tan gracioso.

Connection String Parameter Pollution

View more presentations from chemai64.

Saludos Malignos!

PD: Gracias a Aint que me hizo un poster la mar de chulo para la sesión que voy a dar el próximo día 25 en Pamplona y que aproveché para decorar las slides.

4 comentarios:

Miguel dijo...: otra gran idea feliz.
¡enhorabuena!; 18/9/09 2:48 a. m.
ramandi dijo...: Moooola!!
No tenéis una idea buena!! ;D; 18/9/09 9:20 a. m.
Anónimo dijo...: http://i31.tinypic.com/2ed5ai8.jpg

:$:$:$; 18/9/09 5:00 p. m.
Unam1 dijo...: Esto promete...; 18/9/09 9:30 p. m.

Publicar un comentario

Suscribirse a: Enviar comentarios (Atom)

Etiquetas

Hacking (2069)

Eventos (1289)

Seguridad Informática (983)

Curiosidades (855)

pentesting (770)

0xWord (600)

Privacidad (506)

Google (492)

conferencias (463)

AI (443)

ciberseguridad (434)

IA (429)

Telefónica (429)

ElevenPaths (420)

MyPublicInbox (420)

Humor (415)

Libros (402)

Inteligencia Artificial (383)

formación (352)

Cursos (340)

Malware (305)

Latch (288)

hardening (275)

charlas (264)

pentest (261)

hackers (260)

Iphone (257)

Windows (257)

Linux (255)

Fingerprinting (248)

Identidad (248)

Comics (245)

Eleven Paths (242)

Apple (238)

Android (236)

No Lusers (226)

Internet (223)

FOCA (215)

Spectra (211)

Machine Learning (194)

Metadatos (193)

Reto Hacking (188)

Universidad (178)

Facebook (177)

Análisis Forense (176)

e-mail (175)

iOS (175)

Entrevistas (169)

LUCA (168)

WhatsApp (159)

Aura (158)

auditoría (154)

Cómics (153)

Tempos (153)

Estafas (151)

GenAI (150)

Python (145)

personal (145)

Microsoft (142)

SQL Injection (142)

redes (141)

Cálico Electrónico (140)

Spam (137)

Generative-AI (136)

twitter (135)

metasploit (128)

mitm (127)

Web3 (126)

big data (125)

Artificial Intelligence (123)

Cognitive Intelligence (123)

PowerShell (119)

LLM (117)

Internet Explorer (116)

Movistar Home (113)

fraude (113)

Blockchain (111)

BigData (110)

Música (110)

WiFi (110)

bug (110)

Windows Vista (109)

Herramientas (108)

Cognitive Services (105)

Criptografía (105)

Movistar (105)

Windows Server (105)

Deep Learning (104)

Phishing (102)

Blind SQL Injection (101)

Windows 7 (98)

GenerativeAI (95)

2FA (94)

ChatGPT (94)

cibercrimen (94)

OSINT (93)

XSS (92)

ipad (92)

Cifrado (90)

IE IE9 (89)

bitcoin (89)

criptomonedas (88)

innovación (88)

bugs (86)

tokens (86)

hardware (84)

BING (83)

Open Source (82)

Apache (81)

Seguridad Física (81)

Youtube (81)

tokenomics (79)

IPv6 (77)

Firefox (76)

ciberespionaje (76)

programación (76)

Bitcoins (73)

Gmail (73)

Windows 10 (73)

fuga de datos (72)

Cloud computing (71)

DeepFakes (71)

IoT (71)

Juegos (71)

DNS (70)

SMS (70)

blog (70)

blogs (70)

Living Apps (69)

Software Libre (69)

Movistar + (68)

exploit (68)

GPRS (67)

Google Chrome (67)

fortificación (67)

podcasts (67)

Shodan (65)

.NET (64)

IIS (64)

antimalware (64)

PHP (62)

Wordpress (61)

exploiting (61)

Cracking (60)

MySQL (60)

GPS (59)

podcast (59)

SQL Server (58)

SmartContracts (58)

Wireless (58)

LLMs (57)

Mac OS X (57)

Ubuntu (57)

cons (57)

metadata (57)

Oracle (56)

Windows 8 (56)

kali (56)

redes sociales (56)

spoofing (56)

CON (54)

Google Play (53)

Windows XP (53)

fraude online (53)

hacked (53)

PCWorld (52)

libro (52)

iPv4 (51)

javascript (51)

Citrix (50)

Faast (50)

e-crime (50)

ciberguerra (49)

BlueTooth (48)

SmartTV (48)

Telegram (48)

Técnicoless (48)

Office (47)

Tacyt (47)

docker (47)

Living App (46)

Talentum (46)

Técnico-less (46)

UAC (46)

Wayra (46)

Amazon (45)

Java (45)

fan Tokens (45)

OOXML (44)

Troyanos (44)

Cloud (43)

LDAP (43)

Red Team (43)

APT (42)

Blind LDAP Injection (42)

Chrome (42)

Kali Linux (42)

microhistorias (42)

radio (42)

Excel (41)

LDAP Injection (41)

SmartHome (41)

Terminal Services (41)

biometría (41)

fugas de información (41)

token (41)

HTTP (40)

Proxy (40)

https (40)

leak (40)

Generative AI (39)

Hijacking (39)

Raspberry Pi (39)

anonimato (39)

smartphone (39)

ssl (39)

MetaShield Protector (38)

PDF (38)

TOR (38)

adware (38)

exploits (38)

metaverso (38)

Botnets (37)

Evil Foca (37)

NFTs (37)

apps (37)

nft (37)

singularity hackers (37)

Fugas de Datos (36)

ODF (36)

Fake News (35)

Firewall (35)

MS SQL Server (35)

dibujos (35)

footprinting (35)

legalidad (35)

Azure (34)

TOTP (34)

esteganografía (34)

LOPD (33)

e-goverment (33)

Mac (32)

developer (32)

makers (32)

ransomware (32)

GPT (31)

Instagram (31)

Movistar+ (31)

bots (31)

documentación (31)

hacktivismo (31)

CDO (30)

TID (30)

legislación (30)

Calendario_Torrido (29)

FakeNews (29)

Active Directory (28)

Alexa (28)

BlackSEO (28)

Dust (28)

Movistar Plus (28)

Voip (28)

pentesters (28)

reversing (28)

robots (28)

webcam (28)

wikileaks (28)

Bit2Me (27)

Botnet (27)

Deep Web (27)

RSS (27)

SEO (27)

Sinfonier (27)

Siri (27)

chatbot (27)

ciberestafas (27)

fuga de información (27)

GSM (26)

Mozilla Firefox (26)

SQLi (26)

VPN (26)

Webmails (26)

ethereum (26)

macOS (26)

pentester (26)

programación .NET (26)

P2P (25)

Twitel (25)

datos (25)

jailbreak (25)

Bard (24)

Exchange Server (24)

Windows TI Magazine (24)

Yahoo (24)

cómic (24)

DeepLearning (23)

HTML (23)

Hotmail (23)

Linkedin (23)

troyano (23)

3G (22)

Gemini (22)

IBM (22)

Joomla (22)

Metashield (22)

Open Gateway (22)

OpenOffice (22)

forensics (22)

0day (21)

Debian (21)

Llama (21)

SmartWiFi (21)

XBOX (21)

antispam (21)

arduino (21)

cine (21)

curso (21)

e-mails (21)

gaming (21)

tuenti (21)

ENS (20)

Informática 64 (20)

Informática64 (20)

OpenAI (20)

PGP (20)

Path 5 (20)

Ruby (20)

sniffers (20)

vulnerabilidades (20)

DirtyTooth (19)

NFC (19)

Office365 (19)

SSH (19)

USB (19)

antivirus (19)

CSPP (18)

Kubernetes (18)

Microsoft Office (18)

Momentus Ridiculous (18)

SPF (18)

Sun (18)

Tu.com (18)

VR/AR (18)

dkim (18)

doxing (18)

e-commerce (18)

ingeniería social (18)

scada (18)

3D Printer (17)

BLE (17)

DevOps (17)

Firma Digital (17)

GDPR (17)

Hastalrabo de tontos (17)

OTP (17)

RDP (17)

Skype (17)

Smart Contracts (17)

Sun Solaris (17)

charla (17)

chat (17)

conferencia (17)

foolish (17)

spear phishing (17)

GAN (16)

GitHub (16)

Google Authenticator (16)

Google Cloud (16)

Messenger (16)

Oauth2 (16)

Office 365 (16)

OpenSource (16)

Smart Home (16)

Spotify (16)

antiphishing (16)

antiransomware (16)

certificados digitales (16)

pentesting persistente (16)

Blogger (15)

D.O.S. (15)

DEFCON (15)

DNIe (15)

Google Home (15)

OpenGateway (15)

Windows 8.1 (15)

Windows Server 2016 (15)

cuentos (15)

hacker (15)

API (14)

BSQLi (14)

CSRF (14)

Captchas (14)

David Hasselhoff (14)

IE9 (14)

ML (14)

Netflix (14)

OAuth (14)

ONG (14)

OS X (14)

SQLite (14)

Seguridad (14)

Steve Jobs (14)

Websticia (14)

app (14)

control parental (14)

drones (14)

AMSTRAD (13)

Blue Team (13)

DeFi (13)

Forefront (13)

Mobile Connect (13)

Opera (13)

Outlook (13)

RSA (13)

SIM (13)

SealSign (13)

TikTok (13)

coches (13)

CISO (12)

Connection String Parameter Pollution (12)

Cybersecurity (12)

FTP (12)

Forensic Foca (12)

Quantum (12)

RFID (12)

RedHat (12)

Visual Studio (12)

bias (12)

ciberterrorismo (12)

kevin Mitnick (12)

sexting (12)

spyware (12)

Apple Safari (11)

DeepWeb (11)

ElevenPahts (11)

GSMA (11)

Humanos Digitales (11)

Intel (11)

MVP (11)

MacBook (11)

Ruby on Rails (11)

Safari (11)

Sharepoint (11)

Tempest (11)

Vbooks (11)

Virus (11)

e-sports (11)

estegoanálisis (11)

Adobe (10)

Blind XPath Injection (10)

Clickjacking (10)

DDOS (10)

DMZ (10)

IDS (10)

IE7 (10)

LFI (10)

Mastodon (10)

Realidad Virtual (10)

Rootkits (10)

SecDevOps (10)

Steve Wozniak (10)

Windows Mobile (10)

Windows Phone (10)

chatbots (10)

cyberbullying (10)

domótica (10)

e-health (10)

ibombshell (10)

4G (9)

CMS (9)

Certificate Pinning (9)

DLP (9)

Dropbox (9)

HaaC (9)

Lion (9)

PLCs (9)

RFI (9)

SenderID (9)

SmartID (9)

TCP/IP (9)

Windows Server 2008 (9)

Windows Server 2012 (9)

anonymous (9)

ciberspionaje (9)

cookies (9)

html5 (9)

kernel (9)

nmap (9)

AWS (8)

Adobe Flash (8)

Buffer Overflow (8)

Cisco (8)

Claude (8)

Click-Fraud (8)

DoS (8)

HSTS (8)

Hadoop (8)

ICA (8)

ICS (8)

MSDOS (8)

Meta (8)

Multimedia (8)

Music (8)

OpenSSL (8)

PPTP (8)

SLM (8)

SMTP (8)

Samsung (8)

Smart City (8)

TV (8)

Virtualización (8)

XSPA (8)

email (8)

iMessage (8)

patentes (8)

pentesting continuo (8)

sci-fi (8)

scratch (8)

smartcities (8)

tecnología (8)

0days (7)

2FWB (7)

AntiDDOS (7)

App Store (7)

BOFH (7)

Bill Gates (7)

BlackBerry (7)

C (7)

Cognitives Intelligence (7)

Drupal (7)

GitHub Copilot (7)

Go (7)

Gremlin (7)

Novell (7)

Recover Messages (7)

Steganografía (7)

Telefonica (7)

Tinder (7)

UMTS (7)

WAF (7)

Wi-Fi (7)

Windows live (7)

carding (7)

censura (7)

cso (7)

defacement (7)

delitos (7)

fútbol (7)

paypal (7)

sextorsion (7)

wardriving (7)

web30 (7)

2G (6)

5G (6)

ASP (6)

Ads (6)

Apache Hadoop (6)

Bitlocker (6)

CDCO (6)

Cognitive Ingelligence (6)

GNU (6)

Google Maps (6)

Grooming (6)

HoneyPot (6)

Kioskos Interactivos (6)

Magento (6)

MetaShield Client (6)

Microsoft Word (6)

Moodle (6)

Mozilla (6)

NoSQL (6)

Rogue AP (6)

S/MIME (6)

SLAAC (6)

SandaS (6)

Sappo (6)

TLS (6)

UNIX (6)

bootkits (6)

ehealth (6)

iCloud (6)

iWork (6)

mASAPP (6)

master (6)

pentestin (6)

pentesting by desing (6)

seguridad informáitca (6)

ASM (5)

AirPods (5)

Bash (5)

CTO (5)

Cortana (5)

DNIe 3.0 (5)

Edge (5)

FaceID (5)

FaceTime (5)

Google+ (5)

Growth hacking (5)

IAG (5)

JSP (5)

Kerberos (5)

Maps (5)

Microsoft Teams (5)

MongoDB (5)

MyPubilcInbox (5)

Nodejs (5)

OWASP (5)

OpenVPN (5)

PKI (5)

Perl (5)

Pigram (5)

Porno (5)

PrestaShop (5)

Prompt Injection (5)

QR Code (5)

SNMP (5)

Sandas GRC (5)

Snapchat (5)

Stable Diffusion (5)

Tesla (5)

TrueCrypt (5)

Vamps (5)

Web3.0 (5)

Wikipedia (5)

Xpath injection (5)

Zoom (5)

antispoofing (5)

ciberdefensa (5)

deception (5)

eGarante (5)

firewalls (5)

ladrones (5)

leaks (5)

seminarios (5)

AES (4)

APTs (4)

Access (4)

Acens (4)

Applet (4)

BuscanHackers (4)

Cagadas (4)

Cibersecurity (4)

Cognitie Intelligence (4)

Coldfusion (4)

DMARC (4)

EMV (4)

Google Glass (4)

HPP (4)

HTML 5 (4)

Hackin9 (4)

Hosting (4)

IE8 (4)

Lasso (4)

Live (4)

Maltego (4)

MetaShield Forensics (4)

Microsoft IIS (4)

Orange (4)

Path 6 (4)

PostgreSQL (4)

Pyhton (4)

RootedCON (4)

SSRF (4)

Sony (4)

VIVO (4)

WPA (4)

Windows 95 (4)

XML (4)

crime (4)

deporte (4)

estegonanálisis (4)

javascipt (4)

número de teléfono (4)

ransomsware (4)

routing (4)

smartphones (4)

switching (4)

3D (3)

AirBnB (3)

Apple Watch (3)

BASIC (3)

BlackASO (3)

C# (3)

CCTV (3)

Certificate Transparency (3)

Cognite Services (3)

Cpanel (3)

Creepware (3)

Dapp (3)

Django (3)

Exchange (3)

Fake AV (3)

Fedora (3)

Gentoo (3)

Google Car (3)

Google Drive (3)

Gtalk (3)

HOLS (3)

Hyper-V (3)

Hyperboria (3)

IE (3)

JBOSS (3)

Kaspersky (3)

LTE (3)

MDM (3)

Macintosh (3)

MetaShield Forenscis (3)

Metashield Analyzer (3)

Micro:bit (3)

NTP (3)

OSX (3)

PCI (3)

POP3 (3)

Palo Alto (3)

Poker (3)

Reactos (3)

Robtex (3)

SAP (3)

SDR (3)

SQL (3)

SS7 (3)

Secure Boot (3)

Shaadow (3)

Shadow (3)

Singularity (3)

Suse (3)

System Center (3)

VMWare (3)

Wallet (3)

WebServices (3)

actualizaciones (3)

antifraude (3)

artificial inteligence (3)

ciberguera (3)

criptoanálisis (3)

defacers (3)

e-bike (3)

eSports (3)

evilgrade (3)

iPhone 6 (3)

malvertising (3)

nginx (3)

penteting (3)

router (3)

smartcards (3)

smshing (3)

vulnerabilidad (3)

AFP (2)

AMSI (2)

AirTags (2)

Alise Devices (2)

Apolo (2)

AppStore (2)

Asterisk (2)

BBDD (2)

Burp (2)

CDN (2)

COBOL (2)

Chromecast (2)

DRM (2)

Dall-e (2)

EXIF (2)

Ebay (2)

Espías (2)

Evernote (2)

Flash (2)

FreeNET (2)

Generatie-AI (2)

Google Assistant (2)

HPKP (2)

HUE (2)

HortonWorks (2)

IMAP (2)

INCIBE (2)

IPS (2)

ISV Magazine (2)

Inteligencia Arificial (2)

JSON (2)

Keylogger (2)

Lenguaje C (2)

Line (2)

Lockpicking (2)

Longhorn (2)

MetaShield for IIS (2)

NAP (2)

NLP (2)

Nokia (2)

Patchs (2)

Path Transversal (2)

Pentestng (2)

Play framework (2)

PowerPoint (2)

Prompt Injetion (2)

Qustodio (2)

RCS (2)

RTL (2)

Reinforcement Learning (2)

Rogue AV (2)

Rogue BT (2)

RoundCube (2)

SDL (2)

SQL Injeciton (2)

SSOO (2)

SalesForce (2)

Slack (2)

SmartSteps (2)

Squirrelmail (2)

Surface (2)

Swift (2)

Symantec (2)

TomCat (2)

Touch ID (2)

Twitch (2)

Uber (2)

VNC (2)

WEP (2)

Windows CE (2)

Windows Serbver 2016 (2)

Windows Server 2008 R2 (2)

Word (2)

antimwalware (2)

antiphising (2)

auditoria (2)

avatares (2)

bizum (2)

cheater (2)

chromium (2)

ciberfensa (2)

ciberfraude (2)

cibersegurdiad (2)

cjdns (2)

código penal (2)

decompilador (2)

devoOps (2)

dni (2)

e-learning (2)

estegoanális (2)

haking (2)

hash (2)

homePWN (2)

iPhone 5c (2)

iPhone 7 (2)

iPhone X (2)

ipfs (2)

liliac (2)

litecoin (2)

man in the middle (2)

pederastas (2)

pentesting persistentes (2)

pharming (2)

phising (2)

solidaridad (2)

threads (2)

wearables (2)

. BigData (1)

0xWork (1)

0xWrod (1)

AJAX (1)

AR (1)

AS/400 (1)

Acer (1)

AirOS (1)

Alan Turing (1)

Apache Ambari (1)

Apache CouchDB (1)

Apache Storm (1)

AppLocker (1)

Apple Wath (1)

Apple. Siri (1)

Apple. iPhone (1)

Aura Movistar Home (1)

Badoo (1)

BarrelFish (1)

Bilind SQL Injection (1)

BluetTooth (1)

CSP (1)

CSSP (1)

Canon (1)

Cassandra (1)

ChatON (1)

Cloiud (1)

Cognitie Services (1)

Cooud (1)

Cómis (1)

DHCP (1)

DNI 3.0 (1)

De mi boca (1)

Deep Learning (1)

DeepLeraning (1)

DreamWeaver (1)

EDR (1)

ElasticSearch (1)

ElevenPatchs (1)

Evil Signature Injection (1)

Exchangers (1)

FIDO (1)

FOCA. (1)

FileVault (1)

Firefox OS (1)

Fortran (1)

FreeBSD (1)

GenerativaAI (1)

GesConsultores (1)

Google Adwords (1)

Google Docs (1)

Google Now (1)

Grindr (1)

Grok (1)

Guadalinex (1)

HPC (1)

HTC (1)

Hadening (1)

Hololens (1)

Hotmail. Google (1)

Huawei (1)

IBERIA (1)

IIoT (1)

ISO (1)

ITIL (1)

IaaS (1)

Inteco (1)

Inteliencia Artificial (1)

Inteligencia Artíficial (1)

Inteligenica Artificial (1)

JQuery (1)

JavasScript (1)

Jenkins (1)

JetSetMe (1)

Katana (1)

Kindle (1)

LDA Injection (1)

LDAP Injeciton (1)

Lenguaje D (1)

Liferay (1)

Liiving App (1)

Liniux (1)

Logitech (1)

Londres (1)

Lumia (1)

Lync (1)

MD5 (1)

MIME (1)

MMS (1)

Mac OS (1)

Machine Learing (1)

MachineLearning (1)

MetaShield for SharePoint (1)

Metasplloit (1)

Metro (1)

Microhistoias (1)

Minecraft (1)

Monero (1)

Movistar + Movistar+ (1)

MyPublicInbo (1)

MyPublicInbox. (1)

MyPublicInox (1)

MyPulicInbox (1)

NetBus (1)

No Lusres (1)

ONO (1)

OSPF (1)

OSS (1)

OWIN (1)

Oculus (1)

Omron (1)

Open X-Ghange (1)

Open-XChange (1)

OpenID (1)

OpenNebula (1)

OpenWRT (1)

OwnCloud (1)

Patch 5 (1)

Periscope (1)

Progración (1)

RFID. EMV (1)

RFU (1)

RGPD (1)

RIP (1)

Revover Messages (1)

Robotx (1)

SIEM (1)

SIGINT (1)

SPDY (1)

SRP (1)

SSID Pinning (1)

STEM (1)

SVG (1)

SWF (1)

Safri (1)

Sir (1)

Sistema Experto (1)

SmartAccess (1)

SmartDigits (1)

SmartGrid (1)

SmartWiiFi (1)

Snort (1)

Snowden (1)

Solaris (1)

Spartan (1)

Spotbros (1)

Steve Ballmer (1)

SugarCRM (1)

TMG (1)

TPM (1)

Telefóncia (1)

Telnet (1)

Tu (1)

Twiter (1)

Twitter. (1)

Twombola (1)

UIP (1)

Umbraco (1)

VBA (1)

VENOM (1)

WAMP (1)

Wacom (1)

Watson (1)

Web 3 (1)

WebShell (1)

Webmails IE (1)

WhtasApp (1)

Windows 98 (1)

Windows Defender (1)

Windows Phone 7 (1)

Windows Server 8 (1)

WordPess (1)

WordPres (1)

X (1)

ZigBee (1)

algoritmo (1)

antiramsonware (1)

auditoriía (1)

bluesky (1)

ciencia (1)

comunicación (1)

craking (1)

criptoanális (1)

ePad (1)

eleven paths. Sinfonier (1)

evento (1)

eventos conferencias (1)

expliting (1)

fake brokers (1)

firmware (1)

forensec (1)

fugas de daos (1)

futbolín (1)

gazapos (1)

hackers. (1)

hardeing (1)

hardenning (1)

hardning (1)

hijakcing (1)

iOS 11 (1)

iOS 8 (1)

iOS iPhone (1)

iPad Pro (1)

iTunes (1)

identidads (1)

jugos (1)

malvetising (1)

mediawiki (1)

mtim (1)

musica (1)

ntfs (1)

pedofília (1)

penesting (1)

pentesting by design (1)

pentesting persiste (1)

ponencias (1)

poodle (1)

presonal (1)

programación. .NET (1)

programción (1)

ransonware (1)

redes social (1)

regulación (1)

rumor (1)

seguridad informatica (1)

socket (1)

tabnabbing (1)

unlock (1)

veeam (1)

winsocket (1)