Cybercrime is often discussed in terms of vulnerabilities, malware, stolen credentials, and the techniques attackers use to compromise their targets. But the technical side is only part of the pict...

In this blog, I aim to provide bug hunters and pentesters with almost all they need to know to start hacking applications that utilize WebSockets, as it’s a huge attack surface that usually goes un...

Hunting for cache deception does not always imply looking for pages that contain authenticated user’s data, even unauthenticated app visitors can enter sensitive data in the website’s input fields ...

In this blog I’m going to go through a systematic approach to test for h2c smuggling on your targets, whether you are doing it full black-box or gray-box. We are going to brush off the foundations ...

This blog covers all misconfigurations present in the Damn Vulnerable Nginx Proxy, explaining detection methods, exploitation from a black-box perspective, then reading the respective configuration...