Detailed technical analysis of vulnerabilities discovered during bug bounties, CTFs, and personal research.
A walkthrough of a common but deadly attack path in Active Directory starting with AS-REP roasting and ending in complete domain compromise.
How a missing authorization check on a critical API endpoint allowed full account takeover.
A detailed walkthrough on discovering a Reflected Cross-Site Scripting (XSS) vulnerability that bypassed an initial WAF filter using clever encoding.
A detailed walkthrough on discovering a Reflected Cross-Site Scripting (XSS) vulnerability that bypassed an initial WAF filter using clever encoding.
A detailed walkthrough on discovering a Reflected Cross-Site Scripting (XSS) vulnerability that bypassed an initial WAF filter using clever encoding.