DFIR - Don't Forget Your Roots
Explore essential DFIR skills, from understanding applications and APIs to analyzing C2 beacons, with insights from an experienced practitioner's career journey.
JWTs and Why They Suck
Explore the pitfalls of JWTs, their unnecessary complexity, and better alternatives for secure authentication in web applications.
The Art of Exploiting Logical Flaws in Web Applications
Exploring techniques to detect and exploit logical vulnerabilities in web applications, focusing on manual testing methods and real-world examples from bug bounty programs.
The Road Towards 365 Bugs in Microsoft Office 365
Discover vulnerabilities in Microsoft 365 applications, including cross-tenant privacy leaks, SQLi, CSRF, SSRF, and XSS. Learn bug hunting techniques and tips for testing new Office 365 features.
AEZAKMI - Browser Anonymity & Fingerprinting Bypass
Explore AEZAKMI, a tool for browser anonymity and fingerprinting bypass. Learn how it obfuscates common parameters to enhance online privacy and support multi-account usage.
Everybody Wants SOME - Advance Same Origin Method Execution
Explore advanced Same Origin Method Execution attacks, demonstrating real-world vulnerabilities and new approaches to exploit callback endpoints across major platforms.
Exploiting GLIBC - Hacking Everything
Exploración detallada de la vulnerabilidad CVE-2015-7547 en glibc, demostrando técnicas de explotación remota y su impacto en diversos productos de software compilados con versiones antiguas.
Hacking Cookies in Modern Web Applications and Browsers
Explore cookie vulnerabilities in web apps and browsers, covering secure flags, HSTS, HttpOnly, domain attributes, and XSS via cookies. Learn to enhance web security from an expert.
Cookie Reuse
Explore cookie reuse vulnerabilities and their impact on web security, including demonstrations of exploits against major platforms and potential denial of service risks.
Automated Dorking for Fun and Salary
Explore automated dorking techniques for efficient information gathering and vulnerability discovery in cybersecurity, enhancing your skills and potential earnings.
Cinematic Games Are Dead! Long Live Cinematic Games!
Explore how art, interface, and UX can create immersive cinematic experiences in games without traditional camera cuts, making players feel like they've stepped into a movie.
AVIF - Creating a New Image Format in the Open
Explore the creation of AVIF, a groundbreaking image format, its technical innovations, and the collaborative process behind its development and implementation in major browsers.
Designing Text UX for Effortless Reading
Explore techniques for creating frictionless text interactions in games, enhancing readability and user engagement through innovative design approaches.
Immersing a Creative World into a Usable UI
Explore techniques for integrating game worlds into user interfaces, balancing immersion and usability. Learn to create engaging UI designs that enhance player experience.
Shading the World of Anthem
Explore BioWare's innovative shader techniques for creating diverse environments and dynamic weather in Anthem, showcasing the power of shaders in game development.
Exploiting Race Condition Vulnerabilities in Web Applications
Explore race condition vulnerabilities in web apps, their impact, and exploitation techniques. Learn about detection challenges, real-world scenarios, and a new penetration testing tool for identifying these elusive security flaws.
Building an Army of Bots by Hijacking a Twitter Handle
Revealing security vulnerabilities in mobile apps that expose Twitter API keys, allowing potential account takeovers and unauthorized actions. Explores causes, impacts, and prevention techniques.
A Hipster History of CORS
Explore the evolution of CORS, its historical context, and modern cross-origin standards. Gain insights into web security and learn how to design secure web applications effectively.
LiveViewJS is the Anti-SPA Library for Reactive App Development in NodeJS and Deno
Explore LiveViewJS, a reactive web development approach using web sockets for NodeJS and Deno. Learn about its simplified API, automatic handling of connections, and efficient UI updates.
Don't Get Owned by Your Dependencies
Explore innovative techniques for mitigating memory safety vulnerabilities in third-party C libraries, focusing on Firefox's lightweight in-memory sandboxing approach and the RLBox framework for efficient, secure application development.
Forming the Dog Internet - Prototyping a Dog-to-Human Video Call Device
Explore the development of a dog-controlled video call device, examining implications for animal-computer interaction and the potential for an animal-centric internet.