Un informático en el lado del mal: Connection String Parameter Pollution

viernes, septiembre 18, 2009

Connection String Parameter Pollution

Mi charla en la Ekoparty ya terminó, y a pesar de los problemas de garganta conseguí llevarla a término tal y como tenía planeado y sin que el portátil me diera ningún pete.

Esta son las slides de la sesión, pero durante las próxima semana publicaremos un artíuclo muy largo sobre este tema... tan gracioso.

Connection String Parameter Pollution

View more presentations from chemai64.

Saludos Malignos!

PD: Gracias a Aint que me hizo un poster la mar de chulo para la sesión que voy a dar el próximo día 25 en Pamplona y que aproveché para decorar las slides.

4 comentarios:

Miguel dijo...: otra gran idea feliz.
¡enhorabuena!; 18/9/09 2:48 a. m.
ramandi dijo...: Moooola!!
No tenéis una idea buena!! ;D; 18/9/09 9:20 a. m.
Anónimo dijo...: http://i31.tinypic.com/2ed5ai8.jpg

:$:$:$; 18/9/09 5:00 p. m.
Unam1 dijo...: Esto promete...; 18/9/09 9:30 p. m.

Publicar un comentario

Suscribirse a: Enviar comentarios (Atom)

Etiquetas

Hacking (2111)

Eventos (1329)

Seguridad Informática (986)

Curiosidades (868)

pentesting (789)

0xWord (624)

AI (529)

IA (513)

Privacidad (512)

Google (504)

conferencias (489)

ciberseguridad (470)

Inteligencia Artificial (455)

MyPublicInbox (455)

Telefónica (442)

ElevenPaths (426)

Humor (415)

Libros (412)

formación (388)

Cursos (358)

Malware (312)

charlas (297)

Latch (290)

hardening (289)

pentest (276)

hackers (269)

Iphone (260)

Linux (259)

Windows (258)

Identidad (253)

Fingerprinting (248)

Comics (247)

Apple (242)

Eleven Paths (242)

Android (238)

No Lusers (226)

Internet (223)

FOCA (215)

Spectra (211)

GenAI (210)

Machine Learning (203)

Metadatos (194)

Reto Hacking (192)

Universidad (187)

Análisis Forense (183)

Artificial Intelligence (181)

e-mail (178)

iOS (178)

Facebook (177)

LLM (175)

Entrevistas (172)

Tempos (172)

LUCA (170)

Aura (166)

WhatsApp (161)

Cómics (156)

auditoría (154)

personal (153)

Estafas (151)

Generative-AI (150)

Microsoft (149)

Python (149)

redes (145)

SQL Injection (143)

Cálico Electrónico (141)

Spam (139)

twitter (138)

Web3 (133)

metasploit (129)

mitm (129)

big data (126)

Cognitive Intelligence (123)

ChatGPT (122)

GenerativeAI (121)

PowerShell (119)

bug (118)

Música (117)

Blockchain (116)

Internet Explorer (116)

Movistar Home (115)

BigData (113)

fraude (113)

Criptografía (112)

Movistar (112)

WiFi (112)

Windows Vista (109)

Herramientas (108)

Cognitive Services (107)

Deep Learning (106)

LLMs (106)

Windows Server (105)

Phishing (103)

Blind SQL Injection (101)

innovación (100)

cibercrimen (99)

Windows 7 (98)

OSINT (97)

Cifrado (96)

bitcoin (95)

2FA (94)

XSS (93)

criptomonedas (93)

bugs (92)

ipad (92)

IE IE9 (89)

hardware (89)

tokens (89)

Open Source (86)

Youtube (84)

BING (83)

Apache (81)

Seguridad Física (81)

programación (81)

tokenomics (81)

DeepFakes (79)

IPv6 (79)

Firefox (76)

ciberespionaje (76)

Bitcoins (75)

blog (74)

CON (73)

Cloud computing (73)

Gmail (73)

IoT (73)

Living Apps (73)

Windows 10 (73)

blogs (73)

Juegos (72)

Movistar + (72)

exploit (72)

fuga de datos (72)

DNS (71)

SMS (70)

Software Libre (69)

Google Chrome (68)

fortificación (68)

podcasts (68)

GPRS (67)

.NET (65)

Shodan (65)

cons (65)

exploiting (65)

IIS (64)

antimalware (64)

podcast (63)

PHP (62)

Wordpress (61)

Cracking (60)

GPS (60)

Generative AI (60)

MySQL (60)

metadata (59)

SQL Server (58)

SmartContracts (58)

Wireless (58)

libro (58)

redes sociales (58)

Mac OS X (57)

Ubuntu (57)

kali (57)

Oracle (56)

Windows 8 (56)

spoofing (56)

Google Play (55)

Wayra (54)

Windows XP (53)

fraude online (53)

hacked (53)

PCWorld (52)

e-crime (51)

iPv4 (51)

javascript (51)

Citrix (50)

Faast (50)

Living App (50)

ciberguerra (50)

GPT (49)

SmartTV (49)

BlueTooth (48)

Red Team (48)

Telegram (48)

Técnicoless (48)

docker (48)

Amazon (47)

Java (47)

Office (47)

Tacyt (47)

Talentum (47)

microhistorias (47)

Técnico-less (46)

UAC (46)

radio (46)

fan Tokens (45)

Cloud (44)

LDAP (44)

OOXML (44)

SmartHome (44)

Troyanos (44)

Blind LDAP Injection (43)

Kali Linux (43)

APT (42)

Chrome (42)

LDAP Injection (42)

biometría (42)

metaverso (42)

token (42)

Excel (41)

HTTP (41)

Proxy (41)

Terminal Services (41)

fugas de información (41)

https (41)

leak (40)

Azure (39)

Hijacking (39)

PDF (39)

Raspberry Pi (39)

TOR (39)

anonimato (39)

developer (39)

esteganografía (39)

exploits (39)

smartphone (39)

ssl (39)

Evil Foca (38)

Fake News (38)

MetaShield Protector (38)

TID (38)

adware (38)

apps (38)

Botnets (37)

Firewall (37)

Movistar+ (37)

NFTs (37)

jailbreak (37)

nft (37)

robots (37)

singularity hackers (37)

Fugas de Datos (36)

Movistar Plus (36)

ODF (36)

bots (36)

dibujos (36)

MS SQL Server (35)

footprinting (35)

legalidad (35)

TOTP (34)

Bit2Me (33)

LOPD (33)

Mac (33)

OpenAI (33)

e-goverment (33)

makers (33)

ransomware (33)

CDO (32)

FakeNews (32)

Botnet (31)

Instagram (31)

documentación (31)

hacktivismo (31)

pentester (31)

Llama (30)

chatbot (30)

ciberestafas (30)

conferencia (30)

legislación (30)

pentesters (30)

Alexa (29)

Calendario_Torrido (29)

Gemini (29)

reversing (29)

Active Directory (28)

BlackSEO (28)

Deep Web (28)

Dust (28)

Voip (28)

webcam (28)

wikileaks (28)

RSS (27)

SEO (27)

Sinfonier (27)

Siri (27)

datos (27)

ethereum (27)

fuga de información (27)

macOS (27)

programación .NET (27)

GSM (26)

Mozilla Firefox (26)

SQLi (26)

VPN (26)

Webmails (26)

gaming (26)

Bard (25)

IBM (25)

P2P (25)

SmartWiFi (25)

Twitel (25)

curso (25)

cómic (25)

DeepLearning (24)

Exchange Server (24)

HTML (24)

Tu.com (24)

VR/AR (24)

Windows TI Magazine (24)

Yahoo (24)

cine (24)

API (23)

Hotmail (23)

Linkedin (23)

Open Gateway (23)

forensics (23)

troyano (23)

3G (22)

Joomla (22)

Metashield (22)

OpenOffice (22)

e-mails (22)

tuenti (22)

0day (21)

Debian (21)

Informática 64 (21)

Informática64 (21)

XBOX (21)

antispam (21)

arduino (21)

DevOps (20)

ENS (20)

Kubernetes (20)

Microsoft Office (20)

PGP (20)

Path 5 (20)

Ruby (20)

SSH (20)

chat (20)

hacker (20)

sniffers (20)

vulnerabilidades (20)

DirtyTooth (19)

NFC (19)

Office365 (19)

OpenSource (19)

SPF (19)

USB (19)

antivirus (19)

charla (19)

dkim (19)

scada (19)

CSPP (18)

Firma Digital (18)

GDPR (18)

Google Cloud (18)

Momentus Ridiculous (18)

OpenGateway (18)

Spotify (18)

Sun (18)

doxing (18)

e-commerce (18)

ingeniería social (18)

3D Printer (17)

BLE (17)

Blogger (17)

Captchas (17)

GitHub (17)

Hastalrabo de tontos (17)

ML (17)

OTP (17)

Office 365 (17)

RDP (17)

Skype (17)

Smart Contracts (17)

Sun Solaris (17)

foolish (17)

kernel (17)

spear phishing (17)

GAN (16)

Google Authenticator (16)

Messenger (16)

Oauth2 (16)

Smart Home (16)

antiphishing (16)

antiransomware (16)

app (16)

certificados digitales (16)

cuentos (16)

pentesting persistente (16)

D.O.S. (15)

DEFCON (15)

DNIe (15)

Google Home (15)

Prompt Injection (15)

Quantum (15)

Seguridad (15)

Windows 8.1 (15)

Windows Server 2016 (15)

drones (15)

AMSTRAD (14)

BSQLi (14)

Blue Team (14)

CSRF (14)

David Hasselhoff (14)

DeFi (14)

IE9 (14)

Netflix (14)

OAuth (14)

ONG (14)

OS X (14)

SQLite (14)

Steve Jobs (14)

Websticia (14)

bias (14)

control parental (14)

estegoanálisis (14)

sexting (14)

Claude (13)

Forefront (13)

Mobile Connect (13)

Opera (13)

Outlook (13)

Perplexity (13)

RSA (13)

SIM (13)

SealSign (13)

SecDevOps (13)

TikTok (13)

coches (13)

CISO (12)

Connection String Parameter Pollution (12)

Cybersecurity (12)

DeepWeb (12)

FTP (12)

Forensic Foca (12)

Humanos Digitales (12)

RFID (12)

RedHat (12)

SLM (12)

Tempest (12)

Visual Studio (12)

chatbots (12)

ciberterrorismo (12)

e-health (12)

kevin Mitnick (12)

spyware (12)

Apple Safari (11)

DeepSeek (11)

ElevenPahts (11)

GSMA (11)

Intel (11)

MVP (11)

MacBook (11)

Meta (11)

Realidad Virtual (11)

Ruby on Rails (11)

Safari (11)

Sharepoint (11)

Vbooks (11)

Virus (11)

e-sports (11)

AWS (10)

Adobe (10)

Blind XPath Injection (10)

Clickjacking (10)

DDOS (10)

DMZ (10)

IDS (10)

IE7 (10)

LFI (10)

Mastodon (10)

Multimedia (10)

Rootkits (10)

Steve Wozniak (10)

TCP/IP (10)

Windows Mobile (10)

Windows Phone (10)

cyberbullying (10)

domótica (10)

ibombshell (10)

sci-fi (10)

tecnología (10)

4G (9)

CMS (9)

Certificate Pinning (9)

DLP (9)

Dropbox (9)

GNU (9)

HaaC (9)

ICS (9)

Lion (9)

PLCs (9)

RFI (9)

SenderID (9)

Smart City (9)

SmartID (9)

TV (9)

Windows Server 2008 (9)

Windows Server 2012 (9)

anonymous (9)

ciberspionaje (9)

cookies (9)

html5 (9)

nmap (9)

patentes (9)

sextorsion (9)

smartcities (9)

ASM (8)

Adobe Flash (8)

Ads (8)

App Store (8)

Buffer Overflow (8)

Cisco (8)

Click-Fraud (8)

DoS (8)

GitHub Copilot (8)

HSTS (8)

Hadoop (8)

ICA (8)

MSDOS (8)

Music (8)

OWASP (8)

OpenSSL (8)

PPTP (8)

SMTP (8)

Samsung (8)

Virtualización (8)

XSPA (8)

ehealth (8)

email (8)

iMessage (8)

pentesting continuo (8)

scratch (8)

0days (7)

2FWB (7)

AntiDDOS (7)

BOFH (7)

Bill Gates (7)

BlackBerry (7)

C (7)

Cognitives Intelligence (7)

Deep Reasoning (7)

Drupal (7)

Go (7)

Google Maps (7)

Gremlin (7)

Novell (7)

PKI (7)

Recover Messages (7)

SLAAC (7)

Steganografía (7)

Telefonica (7)

Tinder (7)

UMTS (7)

WAF (7)

Wi-Fi (7)

Windows live (7)

avatares (7)

carding (7)

censura (7)

criptoanálisis (7)

cso (7)

defacement (7)

delitos (7)

fútbol (7)

master (7)

paypal (7)

wardriving (7)

web30 (7)

2G (6)

3D (6)

5G (6)

ASP (6)

Apache Hadoop (6)

Bitlocker (6)

CDCO (6)

Cognitive Ingelligence (6)

FaceID (6)

Grooming (6)

HoneyPot (6)

Kioskos Interactivos (6)

Magento (6)

MetaShield Client (6)

Microsoft Word (6)

Moodle (6)

Mozilla (6)

MyPubilcInbox (6)

NoSQL (6)

Porno (6)

Rogue AP (6)

S/MIME (6)

SandaS (6)

Sappo (6)

Stable Diffusion (6)

TLS (6)

UNIX (6)

VIVO (6)

bootkits (6)

ciberdefensa (6)

iCloud (6)

iWork (6)

mASAPP (6)

pentestin (6)

pentesting by desing (6)

seguridad informáitca (6)

AirPods (5)

Bash (5)

CTO (5)

Cibersecurity (5)

Cortana (5)

DMARC (5)

DNIe 3.0 (5)

DeepReasoning (5)

Edge (5)

FaceTime (5)

Google+ (5)

Growth hacking (5)

IAG (5)

JSP (5)

Kerberos (5)

Maps (5)

Microsoft Teams (5)

MongoDB (5)

Nodejs (5)

OpenVPN (5)

Perl (5)

Pigram (5)

PrestaShop (5)

QR Code (5)

SNMP (5)

Sandas GRC (5)

Snapchat (5)

Tesla (5)

TrueCrypt (5)

Vamps (5)

Web3.0 (5)

Wikipedia (5)

Xpath injection (5)

Zoom (5)

antispoofing (5)

deception (5)

deporte (5)

eGarante (5)

evento (5)

firewalls (5)

ladrones (5)

leaks (5)

seminarios (5)

AES (4)

APTs (4)

Access (4)

Acens (4)

Applet (4)

BASIC (4)

BuscanHackers (4)

Cagadas (4)

Cognitie Intelligence (4)

Coldfusion (4)

EMV (4)

Google Car (4)

Google Glass (4)

HPP (4)

HTML 5 (4)

Hackin9 (4)

Hosting (4)

IE8 (4)

Lasso (4)

Lenguaje C (4)

Live (4)

Maltego (4)

MetaShield Forensics (4)

Microsoft IIS (4)

Orange (4)

Path 6 (4)

PostgreSQL (4)

Pyhton (4)

RootedCON (4)

SSRF (4)

Sony (4)

WPA (4)

Wallet (4)

Windows 95 (4)

XML (4)

crime (4)

estegonanálisis (4)

javascipt (4)

malvertising (4)

número de teléfono (4)

ransomsware (4)

router (4)

routing (4)

smartphones (4)

switching (4)

AirBnB (3)

AppStore (3)

Apple Watch (3)

BlackASO (3)

C# (3)

CCTV (3)

Certificate Transparency (3)

Cognite Services (3)

Cpanel (3)

Creepware (3)

Dapp (3)

Deep Learning (3)

DeepThink (3)

Django (3)

Exchange (3)

Fake AV (3)

Fedora (3)

Gentoo (3)

Google Drive (3)

Gtalk (3)

HOLS (3)

Hyper-V (3)

Hyperboria (3)

IE (3)

JBOSS (3)

Kaspersky (3)

LTE (3)

MDM (3)

Macintosh (3)

MetaShield Forenscis (3)

Metashield Analyzer (3)

Micro:bit (3)

NTP (3)

OSX (3)

PCI (3)

POP3 (3)

Palo Alto (3)

Patchs (3)

Poker (3)

PowerPoint (3)

RTL (3)

Reactos (3)

Robtex (3)

SAP (3)

SDR (3)

SQL (3)

SS7 (3)

Secure Boot (3)

Shaadow (3)

Shadow (3)

Singularity (3)

Suse (3)

System Center (3)

VMWare (3)

WebServices (3)

actualizaciones (3)

antifraude (3)

artificial inteligence (3)

ciberguera (3)

ciencia (3)

defacers (3)

e-bike (3)

eSports (3)

evilgrade (3)

hash (3)

iPhone 6 (3)

man in the middle (3)

nginx (3)

penteting (3)

smartcards (3)

smshing (3)

vulnerabilidad (3)

AFP (2)

AMSI (2)

AirTags (2)

Alan Turing (2)

Alise Devices (2)

Apolo (2)

Asterisk (2)

BBDD (2)

Burp (2)

CDN (2)

COBOL (2)

CTF (2)

Chromecast (2)

DHCP (2)

DRM (2)

Dall-e (2)

EXIF (2)

Ebay (2)

Espías (2)

Evernote (2)

Flash (2)

FreeNET (2)

Generatie-AI (2)

Google Assistant (2)

HPKP (2)

HUE (2)

HortonWorks (2)

IMAP (2)

INCIBE (2)

IPS (2)

ISV Magazine (2)

IaaS (2)

Inteligencia Arificial (2)

Inteligencia Artiifical (2)

JSON (2)

Keylogger (2)

Line (2)

Lockpicking (2)

Longhorn (2)

MetaShield for IIS (2)

NAP (2)

NLP (2)

Nokia (2)

Path Transversal (2)

Pentestng (2)

Play framework (2)

Prompt Injetion (2)

Qustodio (2)

RCS (2)

Reinforcement Learning (2)

Rogue AV (2)

Rogue BT (2)

RoundCube (2)

SDL (2)

SQL Injeciton (2)

SSOO (2)

SalesForce (2)

Slack (2)

SmartSteps (2)

Squirrelmail (2)

Surface (2)

Swift (2)

Symantec (2)

TFM (2)

TomCat (2)

Touch ID (2)

Tu (2)

Twitch (2)

Uber (2)

VNC (2)

WEP (2)

Windows CE (2)

Windows Serbver 2016 (2)

Windows Server 2008 R2 (2)

Word (2)

algoritmo (2)

antimwalware (2)

antiphising (2)

auditoria (2)

bizum (2)

cheater (2)

chromium (2)

ciberfensa (2)

ciberfraude (2)

cibersegurdiad (2)

cjdns (2)

código penal (2)

decompilador (2)

deep fakes (2)

devoOps (2)

dni (2)

e-learning (2)

entrevista (2)

estegoanális (2)

haking (2)

homePWN (2)

iPhone 5c (2)

iPhone 7 (2)

iPhone X (2)

ipfs (2)

liliac (2)

litecoin (2)

pederastas (2)

pentesting persistentes (2)

pharming (2)

phising (2)

solidaridad (2)

threads (2)

wearables (2)

. BigData (1)

0xWork (1)

0xWrod (1)

AJAX (1)

AR (1)

AS/400 (1)

Acer (1)

Agentic (1)

AirOS (1)

Apache Ambari (1)

Apache CouchDB (1)

Apache Storm (1)

AppLocker (1)

Apple Wath (1)

Apple. Siri (1)

Apple. iPhone (1)

Aura Movistar Home (1)

Badoo (1)

BarrelFish (1)

Bilind SQL Injection (1)

BluetTooth (1)

Bot (1)

CSP (1)

CSSP (1)

Canon (1)

Cassandra (1)

ChatON (1)

Cloiud (1)

Cognitie Services (1)

Cooud (1)

Copilot (1)

Cómis (1)

DNI 3.0 (1)

De mi boca (1)

DeepLeraning (1)

DreamWeaver (1)

EDR (1)

ElasticSearch (1)

ElevenPatchs (1)

Evil Signature Injection (1)

Exchangers (1)

FIDO (1)

FOCA. (1)

FileVault (1)

Firefox OS (1)

Fortran (1)

FreeBSD (1)

GenerativaAI (1)

GesConsultores (1)

Google Adwords (1)

Google Docs (1)

Google Now (1)

Grindr (1)

Grok (1)

Guadalinex (1)

HPC (1)

HTC (1)

Hadening (1)

Harening (1)

Hololens (1)

Hotmail. Google (1)

Huawei (1)

IBERIA (1)

IIoT (1)

ISO (1)

ITIL (1)

Informática (1)

Inteco (1)

Inteliencia Artificial (1)

Inteligencia Artíficial (1)

Inteligenica Artificial (1)

Intelligencia Artificial (1)

JQuery (1)

JavasScript (1)

Jenkins (1)

JetSetMe (1)

KYC (1)

Katana (1)

Kindle (1)

LDA Injection (1)

LDAP Injeciton (1)

Lenguaje D (1)

Liferay (1)

Liiving App (1)

Liniux (1)

Logitech (1)

Londres (1)

Lumia (1)

Lync (1)

MCP (1)

MD5 (1)

MIME (1)

MMS (1)

Mac OS (1)

Machine Learing (1)

MachineLearning (1)

MetaShield for SharePoint (1)

Metasplloit (1)

Metro (1)

Microhistoias (1)

Minecraft (1)

Monero (1)

Movistar + Movistar+ (1)

MyPublicInbo (1)

MyPublicInbox. (1)

MyPublicInox (1)

MyPulicInbox (1)

NASA (1)

NetBus (1)

No Lusres (1)

ONO (1)

OSPF (1)

OSS (1)

OWIN (1)

Oculus (1)

Omron (1)

Open X-Ghange (1)

Open-XChange (1)

OpenID (1)

OpenNebula (1)

OpenWRT (1)

OwnCloud (1)

Patch 5 (1)

Periscope (1)

Progración (1)

Prompt Injeciton (1)

RFID. EMV (1)

RFU (1)

RGPD (1)

RIP (1)

Revover Messages (1)

Robotx (1)

SIEM (1)

SIGINT (1)

SPDY (1)

SRP (1)

SSID Pinning (1)

STEM (1)

SVG (1)

SWF (1)

Safri (1)

Sir (1)

Sistema Experto (1)

SmartAccess (1)

SmartDigits (1)

SmartGrid (1)

SmartWiiFi (1)

Snort (1)

Snowden (1)

Solaris (1)

Spartan (1)

Spotbros (1)

Steve Ballmer (1)

SugarCRM (1)

TMG (1)

TPM (1)

Telefóncia (1)

Telnet (1)

Twiter (1)

Twitter. (1)

Twombola (1)

UIP (1)

Umbraco (1)

VBA (1)

VENOM (1)

Vibe Coding (1)

WAMP (1)

Wacom (1)

Watson (1)

Web 3 (1)

WebShell (1)

Webmails IE (1)

WhtasApp (1)

Windows 98 (1)

Windows Defender (1)

Windows Phone 7 (1)

Windows Server 8 (1)

WordPess (1)

WordPres (1)

X (1)

ZigBee (1)

antiramsonware (1)

auditoriía (1)

bluesky (1)

comunicación (1)

craking (1)

criptoanális (1)

cuirosidades (1)

ePad (1)

eleven paths. Sinfonier (1)

estegonálisis (1)

eventos conferencias (1)

expliting (1)

fake brokers (1)

firmware (1)

forensec (1)

fugas de daos (1)

futbolín (1)

gazapos (1)

hackers. (1)

hardeing (1)

hardenning (1)

hardning (1)

hijakcing (1)

iOS 11 (1)

iOS 8 (1)

iOS iPhone (1)

iPad Pro (1)

iTunes (1)

identidads (1)

jugos (1)

malvetising (1)

mediawiki (1)

mtim (1)

musica (1)

ntfs (1)

pedofília (1)

penesting (1)

pentesting by design (1)

pentesting persiste (1)

ponencias (1)

poodle (1)

presonal (1)

programación. .NET (1)

programción (1)

ransonware (1)

redes social (1)

regulación (1)

rumor (1)

seguridad informatica (1)

socket (1)

t (1)

tabnabbing (1)

unlock (1)

veeam (1)

winsocket (1)