Keycloak

KeyCloak Public Exploits

Keycloak < 24.0.5 is vulnerable to Broken Access Control - Keycloak admin API allows low privilege users to use administrative functions

Interesting Books

Disclaimer: As an Amazon Associate, I earn from qualifying purchases. This helps support this GitBook project at no extra cost to you.

The Web Application Hacker’s Handbook The go-to manual for web app pentesters. Covers XSS, SQLi, logic flaws, and more
Bug Bounty Bootcamp: The Guide to Finding and Reporting Web Vulnerabilities Learn how to perform reconnaissance on a target, how to identify vulnerabilities, and how to exploit them
Real-World Bug Hunting: A Field Guide to Web Hacking Learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery.

I hope it helps you as much as it has helped me. If you can support me in any way, I would deeply appreciate it.

Last updated 19 days ago