The new “Case study” blog series is aimed to present security research for a particular software, protocol or system. Its purpose is to demonstrate how a single, average but a dedicated attacker mi...

This blogpost explores how CSRF attacks can be executed against JSON-based endpoints, the role of SOP/CORS preflight mechanism and bypasses that allow attackers to exploit endpoints expecting JSON ...

One of discoveries of this research was that it is possible to chain few functionalities and misconfigurations together in order to achieve Cross-Site (XS) leak with HTML injection, while strict Co...

In the ever-evolving landscape of cybersecurity, one threat remains a persistent adversary - Cross-Site Scripting (XSS). Despite many efforts to mitigate XSS vulnerabilities, hackers continually fi...