Security research and vulnerability writeups

Most web applications nowadays, if not all, have authenticated routes where you can ...

Geospatial metadata catalogs are one of those pieces of infrastructure that nobody talks about ...

Some of the most under-rated findings we come across during our bug bounty engagements look exactly like ...

Ruby on Rails runs a large slice of the modern web: GitHub, Shopify, Basecamp, and a very long tail of self-hosted products and open-source projects ...

Passing secrets around embedded directly in URLs is not today’s news. Session tokens, magic links, redemption codes, and user identifiers have ...

Recently I was conducting a pentest on a Salesforce instance when I stumbled upon an XSS vulnerability. This writeup details that vulnerability and how ...

Servers and Frameworks, just like us humans, have their own limitations in terms of how much data they can handle at once. Maybe you're are familiar with ...

Like starting recon scripts from scratch from time to time just because we feel like it, I decided to do that for my blog and it's design in general ...

Kanboard is a widely used Kanban project management software with over 10 million downloads on Docker Hub. Today we're going explore how I found ...

In this writeup I'll walk you through how I used CSS Injection to steal users Credit Card Info via Post-Messages ...