HackerSecret.com – The Most Authoritative Site in the World on the Hacking Tools and Techniques, Penetration Testing and CyberSecurity

Tag: HSTS

HSTS From Top to Bottom or GTFO

November 9, 2019

Hacking

Presently sponsored by: Varonis. Free Video Course: 7 Hidden Office 365 Security Settings You Can Only Unlock with PowerShell We’re pretty much at a “secure by default” internet these days, at least that’s the assumption with most websites, particularly so in the financial sector. About 80% of all web pages are loaded over an HTTPS […]
A handy trick for proxying HSTS sites in Chrome

June 14, 2019

Hacking

TL;DR: Chrome has a nifty undocumented trick that makes proxying so much more useful when testing sites using HSTS or pinned certs: where the security warning screen doesn’t give you an option to ignore, type “badidea” to continue anyway. Browser makers have been raising the bar when it comes to website security, gradually moving toward […]