Mateo Hanžek's Security blog

Pentesting & security research

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Categories

Categories

Categories

Case study 1 post

Novel Techniques 2 posts

Pen test tips & tricks 1 post

Recently Updated

Case study: Attacking Ajenti Control Panel Authentication
CSRF in GraphQL and REST APIs - Attack and defend JSON endpoints
Chrome Referrer-Policy override Cross-Site data leak and strict CSP bypass
Weaponizing lesser known event handlers for XSS

Trending Tags

Research Attack-GraphQL-APIs Attack-REST-APIs Authentication-Bypass CORS CSP CSRF DoS Race-Condition Referrer-Policy

© 2026 Mateo Hanžek. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

Research Attack-GraphQL-APIs Attack-REST-APIs Authentication-Bypass CORS CSP CSRF DoS Race-Condition Referrer-Policy

A new version of content is available.