Posts

• Jun 7, 2024

  Zoom Session Takeover - Cookie Tossing Payloads, OAuth Dirty Dancing, Browser Permissions Hijacking, and WAF abuse

• Feb 4, 2024

  ChatGPT Account Takeover - Wildcard Web Cache Deception

• Sep 2, 2022

  Caching the Un-cacheables - Abusing URL Parser Confusions (Web Cache Poisoning Technique)

subscribe via RSS