Discover and read the best of Twitter Threads about #exec
Most recents (2)
I work at a 220-person org that's listed as 'Best org for Remote Workers 2022' by Quartz and rated 4.6 on Glassdoor. For every 3 likes on this tweet, I'll post one tip, policy, take, example of what Springworks does to be an employee-centric organisation 🙌🏽
1/ Whenever I speak to founders/HR/People Ops from orgs that are looking to set policies, I see them focus on 'what if the policy is misused'. At Springworks, we don't focus on bottom 5% behaviour. We lead with trust - policies are made with the best employees in mind
2/ Most orgs overthink when they need to thank people ('do we thank them for doing things that are part of their day-to-day job?'). At Springworks, we have built a culture of appreciation for each other (peers, reportees and managers) that's not based on "outcome/impact-only"
Vamos a jugar a un juego.
Por cada RT que tenga este Tweet doy un tip sobre pentesting web. :D
Por cada RT que tenga este Tweet doy un tip sobre pentesting web. :D
Algunas formas de Byppasear un código 403:
- dominio.com/path//subpath
- dominio.com/path.php/
- dominio.com/%2e/path/
- dominio.com/pAth
- dominio.com/static../confi…
- dominio.com/path/../path/s…
- dominio.com/path/subpath/;
- dominio.com/path/;/subpath
- dominio.com/path//subpath
- dominio.com/path.php/
- dominio.com/%2e/path/
- dominio.com/pAth
- dominio.com/static../confi…
- dominio.com/path/../path/s…
- dominio.com/path/subpath/;
- dominio.com/path/;/subpath
Cuando estamos frente a una api (dominio.com/api/v2/path) es más fácil buscar vulnerabilidades si intentamos pentestear una versión antigua (dominio.com/api/v1/path)
