Summery Facebook allowed online games owners to host their games/applications in apps.facebook.com for many years now. The idea and technology<p>Continue readingMore secure Facebook Canvas : ...
WordPress is huge! Some even estimate 30% of public websites run it in some way or another. In fact, you’re reading this on a WordPress page. Are all of these sites secure? No! Not at all. Wh...
HTTP/2 is easily mistaken for a transport-layer protocol that can be swapped in with zero security implications for the website behind it. In this paper, Iāll introduce multiple new classes of HTTP...
Attack surface monitoring has become increasingly important and popular in recent years as the internet footprint of organizations has increased. Hackers are utilizing advanced recon methods for di...
In the last few days, I have been able to have productive conversations with my peers in the bug bounty community including Patrik who works on the triage team and Luke who leads community efforts ...
Cross-Site Scripting and the alert() function have gone hand in hand for decades. Want to prove you can execute arbitrary JavaScript? Pop an alert. Want to find an XSS vulnerability the lazy way? I...
Introduction Finding DOM XSS can be tricky when itās buried in thousands of lines of code. We recently developed DOM Invader to help tackle this using a combined dynamic+manual approach to vulnerab...
While participating in one private bug bounty program, I discovered a pre-auth RCE in ForgeRock OpenAM server - a popular access management solution for web applications. In this blog post, Iām going
Description This bug could allow an attacker to force a user inĀ Oversightboard.comĀ who visited his website, to make certain requests which<p>Continue readingOversightboard.com site-wide CSRF ...
Description This bug could have allowed an attacker to target Facebook users in order to potentially leak unconfirmed emails or<p>Continue readingDisclose unconfirmed email/phone of a Faceboo...