Un informático en el lado del mal: Connection String Parameter Pollution

viernes, septiembre 18, 2009

Connection String Parameter Pollution

Mi charla en la Ekoparty ya terminó, y a pesar de los problemas de garganta conseguí llevarla a término tal y como tenía planeado y sin que el portátil me diera ningún pete.

Esta son las slides de la sesión, pero durante las próxima semana publicaremos un artíuclo muy largo sobre este tema... tan gracioso.

Connection String Parameter Pollution

View more presentations from chemai64.

Saludos Malignos!

PD: Gracias a Aint que me hizo un poster la mar de chulo para la sesión que voy a dar el próximo día 25 en Pamplona y que aproveché para decorar las slides.

4 comentarios:

Miguel dijo...: otra gran idea feliz.
¡enhorabuena!; 18/9/09 2:48 a. m.
ramandi dijo...: Moooola!!
No tenéis una idea buena!! ;D; 18/9/09 9:20 a. m.
Anónimo dijo...: http://i31.tinypic.com/2ed5ai8.jpg

:$:$:$; 18/9/09 5:00 p. m.
Unam1 dijo...: Esto promete...; 18/9/09 9:30 p. m.

Publicar un comentario

Suscribirse a: Enviar comentarios (Atom)

Etiquetas

Hacking (2054)

Eventos (1279)

Seguridad Informática (983)

Curiosidades (851)

pentesting (767)

0xWord (589)

Privacidad (500)

Google (490)

conferencias (456)

AI (430)

ciberseguridad (423)

Telefónica (421)

ElevenPaths (420)

Humor (413)

IA (411)

MyPublicInbox (406)

Libros (398)

Inteligencia Artificial (366)

formación (344)

Cursos (336)

Malware (305)

Latch (283)

hardening (274)

pentest (259)

hackers (258)

Windows (257)

Linux (255)

Iphone (254)

charlas (254)

Fingerprinting (248)

Comics (245)

Identidad (244)

Eleven Paths (242)

Apple (237)

Android (233)

No Lusers (226)

Internet (223)

FOCA (213)

Spectra (211)

Metadatos (193)

Machine Learning (191)

Reto Hacking (186)

Facebook (177)

e-mail (175)

Universidad (174)

iOS (172)

Análisis Forense (171)

LUCA (168)

Entrevistas (166)

WhatsApp (156)

Aura (154)

auditoría (154)

Estafas (151)

Cómics (148)

Tempos (146)

Python (144)

SQL Injection (142)

personal (142)

Microsoft (140)

redes (140)

Spam (137)

Cálico Electrónico (135)

twitter (133)

GenAI (131)

metasploit (128)

mitm (127)

Generative-AI (125)

big data (124)

Cognitive Intelligence (122)

Web3 (122)

PowerShell (119)

Internet Explorer (116)

fraude (113)

Artificial Intelligence (111)

Movistar Home (111)

WiFi (110)

BigData (109)

Blockchain (109)

Windows Vista (109)

Herramientas (108)

LLM (107)

bug (107)

Música (106)

Windows Server (105)

Deep Learning (104)

Criptografía (103)

Cognitive Services (102)

Movistar (102)

Phishing (102)

Blind SQL Injection (101)

Windows 7 (98)

cibercrimen (94)

2FA (93)

OSINT (92)

XSS (92)

ipad (92)

Cifrado (90)

IE IE9 (89)

bitcoin (88)

criptomonedas (88)

ChatGPT (85)

GenerativeAI (85)

bugs (85)

tokens (84)

BING (83)

innovación (83)

Open Source (82)

Apache (81)

hardware (81)

Seguridad Física (79)

Youtube (78)

IPv6 (77)

Firefox (76)

tokenomics (76)

ciberespionaje (75)

programación (75)

Bitcoins (73)

Gmail (73)

Windows 10 (73)

fuga de datos (72)

Cloud computing (71)

DNS (70)

IoT (70)

Juegos (70)

SMS (70)

blogs (70)

Software Libre (69)

blog (69)

DeepFakes (67)

GPRS (67)

Google Chrome (67)

Living Apps (66)

exploit (66)

fortificación (66)

Movistar + (65)

Shodan (65)

.NET (64)

IIS (64)

antimalware (64)

PHP (62)

podcasts (62)

Wordpress (61)

exploiting (61)

Cracking (60)

MySQL (60)

GPS (58)

SQL Server (58)

Wireless (58)

Mac OS X (57)

SmartContracts (57)

Ubuntu (57)

metadata (57)

Oracle (56)

Windows 8 (56)

kali (56)

redes sociales (56)

spoofing (56)

cons (55)

podcast (55)

Google Play (53)

Windows XP (53)

fraude online (53)

hacked (53)

LLMs (52)

PCWorld (52)

CON (51)

iPv4 (51)

javascript (51)

Citrix (50)

Faast (50)

e-crime (50)

libro (49)

BlueTooth (48)

Telegram (48)

Técnicoless (48)

ciberguerra (48)

Office (47)

Tacyt (47)

SmartTV (46)

Técnico-less (46)

UAC (46)

docker (46)

Java (45)

Wayra (45)

fan Tokens (45)

Amazon (44)

OOXML (44)

Talentum (44)

Troyanos (44)

Cloud (43)

LDAP (43)

Living App (43)

Red Team (43)

APT (42)

Blind LDAP Injection (42)

Chrome (42)

Kali Linux (42)

microhistorias (42)

Excel (41)

LDAP Injection (41)

Terminal Services (41)

biometría (41)

fugas de información (41)

HTTP (40)

Proxy (40)

https (40)

token (40)

Hijacking (39)

Raspberry Pi (39)

anonimato (39)

ssl (39)

MetaShield Protector (38)

PDF (38)

SmartHome (38)

TOR (38)

adware (38)

exploits (38)

radio (38)

Botnets (37)

Evil Foca (37)

NFTs (37)

leak (37)

nft (37)

smartphone (37)

Fugas de Datos (36)

ODF (36)

apps (36)

singularity hackers (36)

Firewall (35)

MS SQL Server (35)

footprinting (35)

legalidad (35)

metaverso (35)

Fake News (34)

esteganografía (34)

LOPD (33)

TOTP (33)

dibujos (33)

e-goverment (33)

Mac (32)

ransomware (32)

Azure (31)

Instagram (31)

bots (31)

documentación (31)

hacktivismo (31)

makers (31)

legislación (30)

Calendario_Torrido (29)

FakeNews (29)

Active Directory (28)

Alexa (28)

BlackSEO (28)

CDO (28)

Dust (28)

Movistar+ (28)

developer (28)

pentesters (28)

reversing (28)

webcam (28)

wikileaks (28)

Botnet (27)

Deep Web (27)

Generative AI (27)

RSS (27)

SEO (27)

Sinfonier (27)

Siri (27)

Voip (27)

chatbot (27)

ciberestafas (27)

fuga de información (27)

Bit2Me (26)

GSM (26)

Mozilla Firefox (26)

SQLi (26)

VPN (26)

Webmails (26)

programación .NET (26)

robots (26)

Movistar Plus (25)

Twitel (25)

ethereum (25)

macOS (25)

pentester (25)

Bard (24)

Exchange Server (24)

P2P (24)

TID (24)

Windows TI Magazine (24)

Yahoo (24)

datos (24)

DeepLearning (23)

GPT (23)

HTML (23)

Hotmail (23)

Linkedin (23)

cómic (23)

jailbreak (23)

troyano (23)

3G (22)

IBM (22)

Joomla (22)

Metashield (22)

OpenOffice (22)

0day (21)

Debian (21)

XBOX (21)

antispam (21)

arduino (21)

e-mails (21)

tuenti (21)

ENS (20)

Informática 64 (20)

Informática64 (20)

PGP (20)

Path 5 (20)

Ruby (20)

SmartWiFi (20)

curso (20)

sniffers (20)

vulnerabilidades (20)

DirtyTooth (19)

Gemini (19)

NFC (19)

Office365 (19)

Open Gateway (19)

SSH (19)

USB (19)

antivirus (19)

cine (19)

forensics (19)

CSPP (18)

Kubernetes (18)

Llama (18)

Microsoft Office (18)

Momentus Ridiculous (18)

SPF (18)

Sun (18)

dkim (18)

doxing (18)

ingeniería social (18)

scada (18)

BLE (17)

Firma Digital (17)

GDPR (17)

Hastalrabo de tontos (17)

OTP (17)

RDP (17)

Skype (17)

Smart Contracts (17)

Sun Solaris (17)

chat (17)

spear phishing (17)

3D Printer (16)

GAN (16)

GitHub (16)

Google Authenticator (16)

Messenger (16)

Oauth2 (16)

OpenAI (16)

OpenSource (16)

VR/AR (16)

antiphishing (16)

antiransomware (16)

certificados digitales (16)

charla (16)

e-commerce (16)

foolish (16)

gaming (16)

pentesting persistente (16)

Blogger (15)

D.O.S. (15)

DEFCON (15)

DNIe (15)

DevOps (15)

Google Cloud (15)

Google Home (15)

Office 365 (15)

Spotify (15)

Windows 8.1 (15)

Windows Server 2016 (15)

cuentos (15)

hacker (15)

BSQLi (14)

CSRF (14)

Captchas (14)

David Hasselhoff (14)

IE9 (14)

ML (14)

Netflix (14)

OAuth (14)

ONG (14)

OS X (14)

SQLite (14)

Smart Home (14)

Steve Jobs (14)

Tu.com (14)

Websticia (14)

control parental (14)

AMSTRAD (13)

Blue Team (13)

Forefront (13)

Mobile Connect (13)

OpenGateway (13)

Outlook (13)

RSA (13)

SIM (13)

SealSign (13)

Seguridad (13)

TikTok (13)

coches (13)

conferencia (13)

drones (13)

API (12)

CISO (12)

Connection String Parameter Pollution (12)

Cybersecurity (12)

DeFi (12)

FTP (12)

Forensic Foca (12)

Opera (12)

RFID (12)

RedHat (12)

Visual Studio (12)

app (12)

bias (12)

ciberterrorismo (12)

kevin Mitnick (12)

spyware (12)

Apple Safari (11)

DeepWeb (11)

ElevenPahts (11)

GSMA (11)

Humanos Digitales (11)

MVP (11)

MacBook (11)

Ruby on Rails (11)

Safari (11)

Sharepoint (11)

Tempest (11)

Vbooks (11)

Virus (11)

e-sports (11)

estegoanálisis (11)

sexting (11)

Blind XPath Injection (10)

Clickjacking (10)

DDOS (10)

DMZ (10)

IDS (10)

IE7 (10)

LFI (10)

Realidad Virtual (10)

Rootkits (10)

Steve Wozniak (10)

Windows Mobile (10)

Windows Phone (10)

chatbots (10)

cyberbullying (10)

domótica (10)

e-health (10)

ibombshell (10)

4G (9)

Adobe (9)

CMS (9)

Certificate Pinning (9)

DLP (9)

Dropbox (9)

HaaC (9)

Intel (9)

Lion (9)

Mastodon (9)

PLCs (9)

Quantum (9)

RFI (9)

SenderID (9)

SmartID (9)

TCP/IP (9)

Windows Server 2008 (9)

Windows Server 2012 (9)

anonymous (9)

ciberspionaje (9)

cookies (9)

html5 (9)

nmap (9)

Buffer Overflow (8)

Cisco (8)

Click-Fraud (8)

DoS (8)

HSTS (8)

Hadoop (8)

ICA (8)

ICS (8)

MSDOS (8)

Meta (8)

Multimedia (8)

Music (8)

OpenSSL (8)

PPTP (8)

SLM (8)

SMTP (8)

Samsung (8)

SecDevOps (8)

XSPA (8)

email (8)

iMessage (8)

kernel (8)

patentes (8)

pentesting continuo (8)

sci-fi (8)

scratch (8)

0days (7)

2FWB (7)

AWS (7)

Adobe Flash (7)

AntiDDOS (7)

App Store (7)

BOFH (7)

Bill Gates (7)

BlackBerry (7)

C (7)

Cognitives Intelligence (7)

Drupal (7)

GitHub Copilot (7)

Go (7)

Gremlin (7)

Novell (7)

Recover Messages (7)

Smart City (7)

Steganografía (7)

Telefonica (7)

Tinder (7)

UMTS (7)

Virtualización (7)

WAF (7)

Wi-Fi (7)

Windows live (7)

carding (7)

censura (7)

cso (7)

defacement (7)

delitos (7)

paypal (7)

smartcities (7)

tecnología (7)

wardriving (7)

web30 (7)

2G (6)

5G (6)

ASP (6)

Ads (6)

Apache Hadoop (6)

Bitlocker (6)

CDCO (6)

Cognitive Ingelligence (6)

GNU (6)

Grooming (6)

HoneyPot (6)

Kioskos Interactivos (6)

Magento (6)

MetaShield Client (6)

Microsoft Word (6)

Moodle (6)

Mozilla (6)

NoSQL (6)

Rogue AP (6)

S/MIME (6)

SLAAC (6)

SandaS (6)

Sappo (6)

TLS (6)

TV (6)

UNIX (6)

bootkits (6)

ehealth (6)

fútbol (6)

iCloud (6)

iWork (6)

mASAPP (6)

pentestin (6)

pentesting by desing (6)

seguridad informáitca (6)

sextorsion (6)

ASM (5)

AirPods (5)

Bash (5)

CTO (5)

Cortana (5)

DNIe 3.0 (5)

Edge (5)

FaceID (5)

FaceTime (5)

Google+ (5)

Growth hacking (5)

IAG (5)

JSP (5)

Kerberos (5)

Microsoft Teams (5)

MongoDB (5)

MyPubilcInbox (5)

Nodejs (5)

OWASP (5)

OpenVPN (5)

PKI (5)

Perl (5)

Pigram (5)

Porno (5)

PrestaShop (5)

QR Code (5)

SNMP (5)

Sandas GRC (5)

Snapchat (5)

Tesla (5)

TrueCrypt (5)

Vamps (5)

Web3.0 (5)

Wikipedia (5)

Xpath injection (5)

Zoom (5)

antispoofing (5)

ciberdefensa (5)

deception (5)

eGarante (5)

firewalls (5)

ladrones (5)

master (5)

seminarios (5)

AES (4)

APTs (4)

Access (4)

Acens (4)

Applet (4)

BuscanHackers (4)

Cagadas (4)

Cibersecurity (4)

Claude (4)

Cognitie Intelligence (4)

Coldfusion (4)

DMARC (4)

EMV (4)

Google Glass (4)

Google Maps (4)

HPP (4)

HTML 5 (4)

Hackin9 (4)

Hosting (4)

IE8 (4)

Lasso (4)

Live (4)

Maltego (4)

MetaShield Forensics (4)

Microsoft IIS (4)

Orange (4)

Path 6 (4)

PostgreSQL (4)

Pyhton (4)

RootedCON (4)

SSRF (4)

Sony (4)

Stable Diffusion (4)

VIVO (4)

WPA (4)

Windows 95 (4)

XML (4)

crime (4)

estegonanálisis (4)

javascipt (4)

número de teléfono (4)

ransomsware (4)

routing (4)

switching (4)

AirBnB (3)

Apple Watch (3)

BASIC (3)

BlackASO (3)

C# (3)

CCTV (3)

Certificate Transparency (3)

Cognite Services (3)

Cpanel (3)

Creepware (3)

Dapp (3)

Django (3)

Exchange (3)

Fake AV (3)

Fedora (3)

Gentoo (3)

Google Car (3)

Google Drive (3)

Gtalk (3)

HOLS (3)

Hyper-V (3)

Hyperboria (3)

IE (3)

JBOSS (3)

Kaspersky (3)

LTE (3)

MDM (3)

Maps (3)

MetaShield Forenscis (3)

Metashield Analyzer (3)

Micro:bit (3)

NTP (3)

OSX (3)

PCI (3)

POP3 (3)

Palo Alto (3)

Poker (3)

Prompt Injection (3)

Reactos (3)

Robtex (3)

SAP (3)

SDR (3)

SQL (3)

SS7 (3)

Secure Boot (3)

Shaadow (3)

Shadow (3)

Singularity (3)

Suse (3)

System Center (3)

VMWare (3)

Wallet (3)

WebServices (3)

actualizaciones (3)

artificial inteligence (3)

ciberguera (3)

criptoanálisis (3)

defacers (3)

deporte (3)

eSports (3)

evilgrade (3)

iPhone 6 (3)

leaks (3)

malvertising (3)

nginx (3)

penteting (3)

smartcards (3)

smartphones (3)

smshing (3)

vulnerabilidad (3)

3D (2)

AFP (2)

AMSI (2)

AirTags (2)

Alise Devices (2)

Apolo (2)

AppStore (2)

Asterisk (2)

BBDD (2)

Burp (2)

CDN (2)

COBOL (2)

Chromecast (2)

DRM (2)

Dall-e (2)

EXIF (2)

Ebay (2)

Espías (2)

Evernote (2)

FreeNET (2)

Generatie-AI (2)

Google Assistant (2)

HPKP (2)

HUE (2)

HortonWorks (2)

IMAP (2)

INCIBE (2)

IPS (2)

ISV Magazine (2)

Inteligencia Arificial (2)

JSON (2)

Keylogger (2)

Lenguaje C (2)

Line (2)

Lockpicking (2)

Longhorn (2)

Macintosh (2)

MetaShield for IIS (2)

NAP (2)

NLP (2)

Nokia (2)

Patchs (2)

Path Transversal (2)

Pentestng (2)

Play framework (2)

PowerPoint (2)

Prompt Injetion (2)

Qustodio (2)

RCS (2)

RTL (2)

Reinforcement Learning (2)

Rogue AV (2)

Rogue BT (2)

RoundCube (2)

SDL (2)

SQL Injeciton (2)

SSOO (2)

SalesForce (2)

Slack (2)

SmartSteps (2)

Squirrelmail (2)

Surface (2)

Swift (2)

Symantec (2)

TomCat (2)

Touch ID (2)

Twitch (2)

VNC (2)

WEP (2)

Windows CE (2)

Windows Serbver 2016 (2)

Windows Server 2008 R2 (2)

Word (2)

antifraude (2)

antimwalware (2)

antiphising (2)

auditoria (2)

bizum (2)

cheater (2)

chromium (2)

ciberfensa (2)

ciberfraude (2)

cibersegurdiad (2)

cjdns (2)

código penal (2)

decompilador (2)

devoOps (2)

dni (2)

e-learning (2)

estegoanális (2)

haking (2)

hash (2)

homePWN (2)

iPhone 5c (2)

iPhone 7 (2)

iPhone X (2)

ipfs (2)

liliac (2)

litecoin (2)

man in the middle (2)

pederastas (2)

pentesting persistentes (2)

pharming (2)

phising (2)

router (2)

solidaridad (2)

wearables (2)

. BigData (1)

0xWork (1)

0xWrod (1)

AJAX (1)

AR (1)

AS/400 (1)

Acer (1)

AirOS (1)

Alan Turing (1)

Apache Ambari (1)

Apache CouchDB (1)

Apache Storm (1)

AppLocker (1)

Apple Wath (1)

Apple. Siri (1)

Apple. iPhone (1)

Aura Movistar Home (1)

Badoo (1)

BarrelFish (1)

Bilind SQL Injection (1)

BluetTooth (1)

CSP (1)

CSSP (1)

Canon (1)

Cassandra (1)

ChatON (1)

Cloiud (1)

Cognitie Services (1)

Cooud (1)

Cómis (1)

DHCP (1)

DNI 3.0 (1)

De mi boca (1)

Deep Learning (1)

DeepLeraning (1)

DreamWeaver (1)

EDR (1)

ElasticSearch (1)

ElevenPatchs (1)

Evil Signature Injection (1)

Exchangers (1)

FIDO (1)

FOCA. (1)

FileVault (1)

Firefox OS (1)

Flash (1)

Fortran (1)

FreeBSD (1)

GenerativaAI (1)

GesConsultores (1)

Google Adwords (1)

Google Docs (1)

Google Now (1)

Grindr (1)

Guadalinex (1)

HPC (1)

HTC (1)

Hadening (1)

Hololens (1)

Hotmail. Google (1)

Huawei (1)

IBERIA (1)

IIoT (1)

ISO (1)

ITIL (1)

Inteco (1)

Inteliencia Artificial (1)

Inteligencia Artíficial (1)

Inteligenica Artificial (1)

JQuery (1)

JavasScript (1)

Jenkins (1)

JetSetMe (1)

Katana (1)

Kindle (1)

LDA Injection (1)

LDAP Injeciton (1)

Lenguaje D (1)

Liferay (1)

Liiving App (1)

Liniux (1)

Logitech (1)

Londres (1)

Lumia (1)

Lync (1)

MD5 (1)

MIME (1)

MMS (1)

Mac OS (1)

Machine Learing (1)

MachineLearning (1)

MetaShield for SharePoint (1)

Metasplloit (1)

Metro (1)

Microhistoias (1)

Minecraft (1)

Monero (1)

Movistar + Movistar+ (1)

MyPublicInbo (1)

MyPublicInbox. (1)

MyPublicInox (1)

MyPulicInbox (1)

NetBus (1)

No Lusres (1)

ONO (1)

OSPF (1)

OSS (1)

OWIN (1)

Oculus (1)

Omron (1)

Open X-Ghange (1)

Open-XChange (1)

OpenID (1)

OpenNebula (1)

OpenWRT (1)

OwnCloud (1)

Patch 5 (1)

Periscope (1)

RFID. EMV (1)

RFU (1)

RGPD (1)

RIP (1)

Revover Messages (1)

Robotx (1)

SIEM (1)

SIGINT (1)

SPDY (1)

SRP (1)

SSID Pinning (1)

STEM (1)

SVG (1)

SWF (1)

Safri (1)

Sir (1)

Sistema Experto (1)

SmartAccess (1)

SmartDigits (1)

SmartGrid (1)

SmartWiiFi (1)

Snort (1)

Snowden (1)

Solaris (1)

Spartan (1)

Spotbros (1)

Steve Ballmer (1)

SugarCRM (1)

TMG (1)

TPM (1)

Telefóncia (1)

Telnet (1)

Tu (1)

Twiter (1)

Twitter. (1)

Twombola (1)

UIP (1)

Uber (1)

Umbraco (1)

VBA (1)

VENOM (1)

WAMP (1)

Wacom (1)

Watson (1)

Web 3 (1)

WebShell (1)

Webmails IE (1)

WhtasApp (1)

Windows 98 (1)

Windows Defender (1)

Windows Phone 7 (1)

Windows Server 8 (1)

WordPess (1)

WordPres (1)

X (1)

ZigBee (1)

algoritmo (1)

antiramsonware (1)

auditoriía (1)

avatares (1)

comunicación (1)

craking (1)

criptoanális (1)

e-bike (1)

ePad (1)

eleven paths. Sinfonier (1)

evento (1)

eventos conferencias (1)

expliting (1)

fake brokers (1)

firmware (1)

forensec (1)

fugas de daos (1)

futbolín (1)

gazapos (1)

hackers. (1)

hardeing (1)

hardenning (1)

hardning (1)

hijakcing (1)

iOS 11 (1)

iOS 8 (1)

iOS iPhone (1)

iPad Pro (1)

iTunes (1)

identidads (1)

jugos (1)

malvetising (1)

mediawiki (1)

mtim (1)

musica (1)

ntfs (1)

pedofília (1)

penesting (1)

pentesting by design (1)

pentesting persiste (1)

ponencias (1)

poodle (1)

presonal (1)

programación. .NET (1)

programción (1)

ransonware (1)

redes social (1)

regulación (1)

rumor (1)

seguridad informatica (1)

socket (1)

tabnabbing (1)

threads (1)

unlock (1)

veeam (1)

winsocket (1)