Concealing payloads in URL credentials

Last year Johan Carlsson discovered you could conceal payloads inside the credentials part of the URL . This was fascinating to me especially because the payload is not actually visible in the URL in

Summary from PortSwigger Research.

More in Identity

Cloudflare & Ping Identity: Identity Security in the Era of AI

VideoCloudflare2d agoIdentityAI

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Microsoft Security Blog2d agoAppSecIdentity

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

The Hacker News2d agoThreat IntelNetworkIdentity

Infostealer riding the AI Train

Check Point Research2d agoThreat IntelIdentityAI

Microsoft 365 accounts compromised at 79 organizations, no passwords needed

Help Net Security2d agoCloudIdentity