Un informático en el lado del mal: Connection String Parameter Pollution

viernes, septiembre 18, 2009

Connection String Parameter Pollution

Mi charla en la Ekoparty ya terminó, y a pesar de los problemas de garganta conseguí llevarla a término tal y como tenía planeado y sin que el portátil me diera ningún pete.

Esta son las slides de la sesión, pero durante las próxima semana publicaremos un artíuclo muy largo sobre este tema... tan gracioso.

Connection String Parameter Pollution

View more presentations from chemai64.

Saludos Malignos!

PD: Gracias a Aint que me hizo un poster la mar de chulo para la sesión que voy a dar el próximo día 25 en Pamplona y que aproveché para decorar las slides.

4 comentarios:

Miguel dijo...: otra gran idea feliz.
¡enhorabuena!; 18/9/09 2:48 a. m.
ramandi dijo...: Moooola!!
No tenéis una idea buena!! ;D; 18/9/09 9:20 a. m.
Anónimo dijo...: http://i31.tinypic.com/2ed5ai8.jpg

:$:$:$; 18/9/09 5:00 p. m.
Unam1 dijo...: Esto promete...; 18/9/09 9:30 p. m.

Publicar un comentario

Suscribirse a: Enviar comentarios (Atom)

Etiquetas

Hacking (2139)

Eventos (1339)

Seguridad Informática (986)

Curiosidades (884)

pentesting (800)

0xWord (639)

AI (590)

IA (576)

Privacidad (531)

Google (520)

Inteligencia Artificial (516)

ciberseguridad (492)

conferencias (491)

MyPublicInbox (470)

Telefónica (443)

ElevenPaths (426)

Libros (422)

Humor (416)

formación (400)

Cursos (362)

Malware (316)

charlas (303)

hardening (296)

Latch (291)

pentest (286)

hackers (274)

Iphone (264)

Windows (260)

Linux (259)

Identidad (258)

Comics (249)

Fingerprinting (249)

Apple (244)

Eleven Paths (242)

Android (241)

GenAI (241)

Artificial Intelligence (226)

No Lusers (226)

Internet (224)

FOCA (215)

Machine Learning (214)

Spectra (211)

LLM (206)

Metadatos (195)

Universidad (194)

Reto Hacking (193)

Análisis Forense (187)

Tempos (185)

iOS (181)

Entrevistas (180)

e-mail (179)

Facebook (177)

LUCA (170)

WhatsApp (168)

Aura (166)

Generative-AI (162)

Cómics (159)

personal (159)

Estafas (154)

auditoría (154)

Microsoft (152)

Python (152)

ChatGPT (149)

redes (148)

Cálico Electrónico (144)

SQL Injection (144)

twitter (141)

Spam (139)

GenerativeAI (136)

Web3 (136)

LLMs (135)

bug (129)

metasploit (129)

mitm (129)

big data (127)

Cognitive Intelligence (123)

Música (121)

Blockchain (119)

PowerShell (119)

Criptografía (116)

Internet Explorer (116)

Movistar Home (115)

BigData (114)

WiFi (114)

fraude (114)

Deep Learning (112)

Movistar (112)

Cognitive Services (111)

Windows Vista (109)

Herramientas (108)

innovación (107)

Phishing (106)

OSINT (105)

Windows Server (105)

cibercrimen (104)

Blind SQL Injection (102)

Cifrado (100)

bugs (99)

Windows 7 (98)

bitcoin (98)

2FA (97)

criptomonedas (96)

hardware (95)

XSS (93)

ipad (93)

tokens (90)

IE IE9 (89)

Open Source (89)

Youtube (89)

DeepFakes (88)

Seguridad Física (85)

BING (84)

programación (82)

tokenomics (82)

Apache (81)

IPv6 (80)

exploit (79)

Generative AI (78)

ciberespionaje (78)

Bitcoins (77)

Cloud computing (76)

Firefox (76)

Juegos (76)

CON (75)

Gmail (74)

IoT (74)

blog (74)

DNS (73)

Living Apps (73)

Windows 10 (73)

blogs (73)

Movistar + (72)

fuga de datos (72)

podcasts (72)

SMS (71)

Google Chrome (70)

Software Libre (69)

fortificación (68)

GPRS (67)

exploiting (67)

podcast (67)

antimalware (66)

.NET (65)

Shodan (65)

cons (65)

IIS (64)

Cracking (62)

GPS (62)

PHP (62)

redes sociales (62)

Wordpress (61)

GPT (60)

MySQL (60)

libro (60)

metadata (60)

SQL Server (58)

SmartContracts (58)

Wireless (58)

Mac OS X (57)

Ubuntu (57)

kali (57)

Oracle (56)

Windows 8 (56)

spoofing (56)

Google Play (55)

Wayra (54)

Windows XP (53)

fraude online (53)

hacked (53)

PCWorld (52)

Red Team (52)

e-crime (52)

iPv4 (52)

ciberguerra (51)

javascript (51)

Citrix (50)

Faast (50)

Living App (50)

SmartTV (49)

Telegram (49)

microhistorias (49)

BlueTooth (48)

Técnicoless (48)

docker (48)

leak (48)

Amazon (47)

Cloud (47)

Java (47)

Office (47)

Tacyt (47)

Talentum (47)

Troyanos (46)

Técnico-less (46)

UAC (46)

biometría (46)

radio (46)

LDAP (45)

OpenAI (45)

fan Tokens (45)

metaverso (45)

APT (44)

Blind LDAP Injection (44)

OOXML (44)

SmartHome (44)

Chrome (43)

Kali Linux (43)

LDAP Injection (43)

fugas de información (43)

token (43)

Excel (42)

Fake News (41)

HTTP (41)

Proxy (41)

Terminal Services (41)

exploits (41)

https (41)

Raspberry Pi (40)

developer (40)

robots (40)

smartphone (40)

Azure (39)

Gemini (39)

Hijacking (39)

PDF (39)

TOR (39)

anonimato (39)

esteganografía (39)

ssl (39)

Botnets (38)

Evil Foca (38)

MetaShield Protector (38)

TID (38)

adware (38)

apps (38)

bots (38)

jailbreak (38)

Firewall (37)

Movistar+ (37)

NFTs (37)

ciberestafas (37)

dibujos (37)

legalidad (37)

nft (37)

singularity hackers (37)

Bit2Me (36)

Fugas de Datos (36)

Movistar Plus (36)

ODF (36)

MS SQL Server (35)

TOTP (35)

footprinting (35)

makers (35)

FakeNews (34)

conferencia (34)

LOPD (33)

Llama (33)

Mac (33)

e-goverment (33)

gaming (33)

ransomware (33)

Botnet (32)

CDO (32)

Instagram (32)

chatbot (32)

pentester (32)

documentación (31)

fuga de información (31)

hacktivismo (31)

ethereum (30)

legislación (30)

macOS (30)

pentesters (30)

reversing (30)

Active Directory (29)

Alexa (29)

BlackSEO (29)

Calendario_Torrido (29)

SEO (29)

Voip (29)

cine (29)

datos (29)

Deep Web (28)

DeepLearning (28)

Dust (28)

webcam (28)

wikileaks (28)

RSS (27)

Sinfonier (27)

Siri (27)

VPN (27)

VR/AR (27)

cómic (27)

programación .NET (27)

GSM (26)

IBM (26)

Mozilla Firefox (26)

Perplexity (26)

SQLi (26)

Webmails (26)

curso (26)

API (25)

Bard (25)

P2P (25)

SmartWiFi (25)

Twitel (25)

forensics (25)

troyano (25)

Exchange Server (24)

HTML (24)

Linkedin (24)

Tu.com (24)

Windows TI Magazine (24)

Yahoo (24)

chat (24)

DeepSeek (23)

Hotmail (23)

Open Gateway (23)

Prompt Injection (23)

Quantum (23)

XBOX (23)

e-mails (23)

3G (22)

Joomla (22)

Metashield (22)

OpenOffice (22)

arduino (22)

tuenti (22)

0day (21)

Debian (21)

DevOps (21)

Informática 64 (21)

Informática64 (21)

ML (21)

Microsoft Office (21)

antispam (21)

hacker (21)

ENS (20)

Kubernetes (20)

OpenSource (20)

PGP (20)

Path 5 (20)

Ruby (20)

SSH (20)

Spotify (20)

USB (20)

antivirus (20)

charla (20)

sniffers (20)

vulnerabilidades (20)

DirtyTooth (19)

Firma Digital (19)

NFC (19)

Office365 (19)

SPF (19)

dkim (19)

doxing (19)

scada (19)

CSPP (18)

Claude (18)

GDPR (18)

GitHub (18)

Google Cloud (18)

Momentus Ridiculous (18)

OpenGateway (18)

Sun (18)

antiphishing (18)

drones (18)

e-commerce (18)

ingeniería social (18)

3D Printer (17)

BLE (17)

Blogger (17)

Captchas (17)

DNIe (17)

Google Authenticator (17)

Hastalrabo de tontos (17)

OTP (17)

Office 365 (17)

RDP (17)

Skype (17)

Smart Contracts (17)

Sun Solaris (17)

cuentos (17)

foolish (17)

kernel (17)

spear phishing (17)

GAN (16)

Messenger (16)

Oauth2 (16)

Smart Home (16)

antiransomware (16)

app (16)

certificados digitales (16)

pentesting persistente (16)

Blue Team (15)

CSRF (15)

D.O.S. (15)

DEFCON (15)

DeFi (15)

Google Home (15)

ONG (15)

Seguridad (15)

Windows 8.1 (15)

Windows Server 2016 (15)

bias (15)

sexting (15)

AMSTRAD (14)

BSQLi (14)

Cybersecurity (14)

David Hasselhoff (14)

Humanos Digitales (14)

IE9 (14)

Netflix (14)

OAuth (14)

OS X (14)

RSA (14)

SQLite (14)

SecDevOps (14)

Steve Jobs (14)

Websticia (14)

control parental (14)

estegoanálisis (14)

CISO (13)

Deep Reasoning (13)

Forefront (13)

Meta (13)

Mobile Connect (13)

Multimedia (13)

Opera (13)

Outlook (13)

SIM (13)

SealSign (13)

Tempest (13)

TikTok (13)

chatbots (13)

coches (13)

e-health (13)

sci-fi (13)

Connection String Parameter Pollution (12)

DDOS (12)

DeepWeb (12)

FTP (12)

Forensic Foca (12)

Intel (12)

MVP (12)

RFID (12)

RedHat (12)

SLM (12)

Sharepoint (12)

Visual Studio (12)

ciberterrorismo (12)

kevin Mitnick (12)

spyware (12)

3D (11)

Agentic (11)

Apple Safari (11)

ElevenPahts (11)

GSMA (11)

MacBook (11)

Realidad Virtual (11)

Ruby on Rails (11)

Safari (11)

Vbooks (11)

Virus (11)

criptoanálisis (11)

e-sports (11)

tecnología (11)

AWS (10)

Adobe (10)

Blind XPath Injection (10)

CMS (10)

Clickjacking (10)

DMZ (10)

IDS (10)

IE7 (10)

LFI (10)

Mastodon (10)

Rootkits (10)

Steve Wozniak (10)

TCP/IP (10)

Windows Mobile (10)

Windows Phone (10)

cyberbullying (10)

domótica (10)

ibombshell (10)

4G (9)

AntiDDOS (9)

Certificate Pinning (9)

DLP (9)

DoS (9)

Dropbox (9)

GNU (9)

GitHub Copilot (9)

HaaC (9)

ICS (9)

Lion (9)

MSDOS (9)

OWASP (9)

PLCs (9)

RFI (9)

SenderID (9)

Smart City (9)

SmartID (9)

TV (9)

Windows Server 2008 (9)

Windows Server 2012 (9)

anonymous (9)

ciberspionaje (9)

cookies (9)

ehealth (9)

html5 (9)

leaks (9)

nmap (9)

patentes (9)

sextorsion (9)

smartcities (9)

ASM (8)

Adobe Flash (8)

Ads (8)

App Store (8)

Buffer Overflow (8)

Cisco (8)

Click-Fraud (8)

Edge (8)

HSTS (8)

Hadoop (8)

ICA (8)

Music (8)

OpenSSL (8)

PPTP (8)

SMTP (8)

Samsung (8)

Stable Diffusion (8)

Virtualización (8)

WAF (8)

Wi-Fi (8)

XSPA (8)

avatares (8)

cloudflare (8)

deep fakes (8)

email (8)

entrevista (8)

fútbol (8)

iMessage (8)

pentesting continuo (8)

scratch (8)

0days (7)

2FWB (7)

BOFH (7)

Bill Gates (7)

BlackBerry (7)

C (7)

Cognitives Intelligence (7)

DeepReasoning (7)

Drupal (7)

Go (7)

Google Maps (7)

Gremlin (7)

Novell (7)

PKI (7)

Porno (7)

Recover Messages (7)

SLAAC (7)

Steganografía (7)

Telefonica (7)

Tinder (7)

UMTS (7)

Windows live (7)

carding (7)

censura (7)

cso (7)

defacement (7)

delitos (7)

deporte (7)

master (7)

paypal (7)

wardriving (7)

web30 (7)

2G (6)

5G (6)

ASP (6)

Apache Hadoop (6)

Bitlocker (6)

CDCO (6)

Cognitive Ingelligence (6)

FaceID (6)

Grooming (6)

HoneyPot (6)

Kioskos Interactivos (6)

Magento (6)

MetaShield Client (6)

Microsoft Word (6)

Moodle (6)

Mozilla (6)

MyPubilcInbox (6)

NoSQL (6)

QR Code (6)

Rogue AP (6)

S/MIME (6)

SandaS (6)

Sappo (6)

TLS (6)

Tesla (6)

UNIX (6)

VIVO (6)

Wallet (6)

algoritmo (6)

bootkits (6)

ciberdefensa (6)

evento (6)

iCloud (6)

iWork (6)

mASAPP (6)

pentestin (6)

pentesting by desing (6)

seguridad informáitca (6)

seminarios (6)

AirPods (5)

Bash (5)

Bot (5)

CTO (5)

Cibersecurity (5)

Cortana (5)

DMARC (5)

DNIe 3.0 (5)

FaceTime (5)

Google+ (5)

Growth hacking (5)

IAG (5)

JSP (5)

Kerberos (5)

Maps (5)

Microsoft Teams (5)

MongoDB (5)

Nodejs (5)

OpenVPN (5)

Perl (5)

Pigram (5)

PrestaShop (5)

SNMP (5)

Sandas GRC (5)

Snapchat (5)

Sony (5)

TrueCrypt (5)

Vamps (5)

Web3.0 (5)

Wikipedia (5)

XML (5)

Xpath injection (5)

Zoom (5)

antispoofing (5)

ciencia (5)

deception (5)

eGarante (5)

firewalls (5)

ladrones (5)

AES (4)

APTs (4)

Access (4)

Acens (4)

Apple Watch (4)

Applet (4)

BASIC (4)

BuscanHackers (4)

Cagadas (4)

Cognitie Intelligence (4)

Coldfusion (4)

EMV (4)

Google Car (4)

Google Drive (4)

Google Glass (4)

HPP (4)

HTML 5 (4)

Hackin9 (4)

Hosting (4)

IE8 (4)

Lasso (4)

Lenguaje C (4)

Live (4)

MDM (4)

Maltego (4)

MetaShield Forensics (4)

Microsoft IIS (4)

Orange (4)

Patchs (4)

Path 6 (4)

PostgreSQL (4)

Pyhton (4)

RootedCON (4)

SQL (4)

SSRF (4)

WPA (4)

Windows 95 (4)

crime (4)

dni (4)

estegonanálisis (4)

fotónica (4)

javascipt (4)

litecoin (4)

malvertising (4)

número de teléfono (4)

ransomsware (4)

router (4)

routing (4)

smartphones (4)

switching (4)

AirBnB (3)

AppStore (3)

BBDD (3)

BlackASO (3)

C# (3)

CCTV (3)

CDN (3)

Certificate Transparency (3)

Cognite Services (3)

Cpanel (3)

Creepware (3)

Dapp (3)

Deep Learning (3)

DeepThink (3)

Django (3)

Exchange (3)

Fake AV (3)

Fedora (3)

Gentoo (3)

Gtalk (3)

HOLS (3)

Hyper-V (3)

Hyperboria (3)

IE (3)

JBOSS (3)

JSON (3)

Kaspersky (3)

LTE (3)

Macintosh (3)

MetaShield Forenscis (3)

Metashield Analyzer (3)

Micro:bit (3)

Monero (3)

NTP (3)

OSX (3)

PCI (3)

POP3 (3)

Palo Alto (3)

Poker (3)

PowerPoint (3)

RTL (3)

Reactos (3)

Robtex (3)

SAP (3)

SDR (3)

SS7 (3)

SalesForce (3)

Secure Boot (3)

Shaadow (3)

Shadow (3)

Signal (3)

Singularity (3)

Suse (3)

System Center (3)

Uber (3)

VMWare (3)

WebServices (3)

actualizaciones (3)

antifraude (3)

artificial inteligence (3)

ciberguera (3)

defacers (3)

e-bike (3)

e-learning (3)

eSports (3)

evilgrade (3)

hash (3)

iPhone 6 (3)

man in the middle (3)

nginx (3)

penteting (3)

smartcards (3)

smshing (3)

vulnerabilidad (3)

AFP (2)

AMSI (2)

AirTags (2)

Alan Turing (2)

Alise Devices (2)

Apolo (2)

Asterisk (2)

Burp (2)

COBOL (2)

CTF (2)

Canon (2)

Chromecast (2)

Copilot (2)

DHCP (2)

DRM (2)

Dall-e (2)

EDR (2)

EXIF (2)

Ebay (2)

Espías (2)

Evernote (2)

Flash (2)

FreeNET (2)

Generatie-AI (2)

Google Assistant (2)

Grok (2)

HPKP (2)

HUE (2)

HortonWorks (2)

IMAP (2)

INCIBE (2)

IPS (2)

ISV Magazine (2)

IaaS (2)

Inteligencia Arificial (2)

Inteligencia Artiifical (2)

Keylogger (2)

Line (2)

Lockpicking (2)

Longhorn (2)

MachineLearning (2)

MetaShield for IIS (2)

Microhistoias (2)

NAP (2)

NLP (2)

Nokia (2)

Path Transversal (2)

Pentestng (2)

Play framework (2)

Prompt Injetion (2)

QRCode (2)

Qustodio (2)

RCS (2)

Reinforcement Learning (2)

Rogue AV (2)

Rogue BT (2)

RoundCube (2)

SDL (2)

SQL Injeciton (2)

SSOO (2)

Slack (2)

SmartSteps (2)

Squirrelmail (2)

Surface (2)

Swift (2)

Symantec (2)

TFM (2)

TomCat (2)

Touch ID (2)

Tu (2)

Twitch (2)

VNC (2)

Vibe Coding (2)

WEP (2)

Windows CE (2)

Windows Serbver 2016 (2)

Windows Server 2008 R2 (2)

Word (2)

X (2)

antimwalware (2)

antiphising (2)

auditoria (2)

aviación (2)

aviones (2)

bizum (2)

cheater (2)

chromium (2)

ciberfensa (2)

ciberfraude (2)

cibersegurdiad (2)

cjdns (2)

comunicación (2)

código penal (2)

decompilador (2)

devoOps (2)

estegoanális (2)

fake brokers (2)

haking (2)

homePWN (2)

iPhone 5c (2)

iPhone 7 (2)

iPhone X (2)

ipfs (2)

liliac (2)

musica (2)

pederastas (2)

pentesting persistentes (2)

pharming (2)

phising (2)

solidaridad (2)

threads (2)

wearables (2)

. BigData (1)

0xWork (1)

0xWrod (1)

AGI (1)

AJAX (1)

ANI (1)

AR (1)

AS/400 (1)

ASI (1)

Acer (1)

AirOS (1)

Apache Ambari (1)

Apache CouchDB (1)

Apache Storm (1)

AppLocker (1)

Apple Wath (1)

Apple. Siri (1)

Apple. iPhone (1)

Artificial Intellligence (1)

Aura Movistar Home (1)

Badoo (1)

BarrelFish (1)

Bilind SQL Injection (1)

BluetTooth (1)

CASB (1)

CSP (1)

CSSP (1)

Cassandra (1)

ChatON (1)

Cloiud (1)

Cognitie Services (1)

Cooud (1)

Cómis (1)

DNI 3.0 (1)

De mi boca (1)

DeepLeraning (1)

DreamWeaver (1)

ElasticSearch (1)

ElevenPatchs (1)

Evil Signature Injection (1)

Exchangers (1)

FIDO (1)

FOCA. (1)

FileVault (1)

Firefox OS (1)

Fortran (1)

FreeBSD (1)

GenerativaAI (1)

GesConsultores (1)

Google Adwords (1)

Google Docs (1)

Google Now (1)

Grindr (1)

Guadalinex (1)

HPC (1)

HTC (1)

Hadening (1)

Harening (1)

Hololens (1)

Hotmail. Google (1)

Huawei (1)

IBERIA (1)

IIoT (1)

ISO (1)

ITIL (1)

Informática (1)

Inteco (1)

Inteliencia Artificial (1)

Inteligencia Artíficial (1)

Inteligenica Artificial (1)

Intelligencia Artificial (1)

JQuery (1)

JavasScript (1)

Jenkins (1)

JetSetMe (1)

KYC (1)

Katana (1)

Kindle (1)

LDA Injection (1)

LDAP Injeciton (1)

Lenguaje D (1)

Liferay (1)

Liiving App (1)

Liniux (1)

Logitech (1)

Londres (1)

Lumia (1)

Lync (1)

MCP (1)

MD5 (1)

MIME (1)

MMS (1)

Mac OS (1)

Machine Learing (1)

MetaShield for SharePoint (1)

Metasplloit (1)

Metro (1)

Minecraft (1)

Movistar + Movistar+ (1)

MyPublicInbo (1)

MyPublicInbox. (1)

MyPublicInox (1)

MyPulicInbox (1)

NASA (1)

NetBus (1)

No Lusres (1)

ONO (1)

OSPF (1)

OSS (1)

OWIN (1)

Oculus (1)

Omron (1)

Open X-Ghange (1)

Open-XChange (1)

OpenID (1)

OpenNebula (1)

OpenWRT (1)

OwnCloud (1)

Patch 5 (1)

Periscope (1)

Progración (1)

Prompt Injeciton (1)

RFID. EMV (1)

RFU (1)

RGPD (1)

RIP (1)

Revover Messages (1)

Robotx (1)

SASE (1)

SIEM (1)

SIGINT (1)

SPDY (1)

SRP (1)

SSID Pinning (1)

STEM (1)

SVG (1)

SWF (1)

Safri (1)

Sir (1)

Sistema Experto (1)

SmartAccess (1)

SmartDigits (1)

SmartGrid (1)

SmartWiiFi (1)

Snort (1)

Snowden (1)

Solaris (1)

Spartan (1)

Spotbros (1)

Steve Ballmer (1)

SugarCRM (1)

TMG (1)

TPM (1)

Telefóncia (1)

Telnet (1)

Twiter (1)

Twitter. (1)

Twombola (1)

UIP (1)

Umbraco (1)

VBA (1)

VENOM (1)

WAMP (1)

Wacom (1)

Watson (1)

Web 3 (1)

WebShell (1)

Webmails IE (1)

WhtasApp (1)

Windows 98 (1)

Windows Defender (1)

Windows Phone 7 (1)

Windows Server 8 (1)

WordPess (1)

WordPres (1)

ZigBee (1)

antiramsonware (1)

auditoriía (1)

bluesky (1)

craking (1)

criptoanális (1)

cuirosidades (1)

doxing. (1)

ePad (1)

eleven paths. Sinfonier (1)

estegonálisis (1)

eventos conferencias (1)

expliting (1)

firmware (1)

forensec (1)

fugas de daos (1)

futbolín (1)

gazapos (1)

hackers. (1)

hardeing (1)

hardenning (1)

hardning (1)

hijakcing (1)

iOS 11 (1)

iOS 8 (1)

iOS iPhone (1)

iPad Pro (1)

iTunes (1)

identidades (1)

identidads (1)

jugos (1)

malvetising (1)

mediawiki (1)

mtim (1)

ntfs (1)

pedofília (1)

penesting (1)

pentesting by design (1)

pentesting persiste (1)

ponencias (1)

poodle (1)

presonal (1)

programación. .NET (1)

programción (1)

ransonware (1)

redes social (1)

regulación (1)

rumor (1)

seguridad informatica (1)

smishing (1)

socket (1)

t (1)

tabnabbing (1)

unlock (1)

veeam (1)

winsocket (1)