MongoDB NoSQL Injection with Aggregation Pipelines

Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP.NET Framework (CVE-2023-36899 & CVE-2023-36560)

Anchor Tag XSS Exploitation in Firefox with Target=”_blank”

Thirteen Years On: Advancing the Understanding of IIS Short File Name (SFN) Disclosure!

My MDSec Blog Posts so far in 2020/2021!

File Upload Attack using XAMLX Files

Uploading web.config for Fun and Profit 2

IIS Application vs. Folder Detection During Blackbox Testing

Danger of Stealing Auto Generated .NET Machine Keys

x-up-devcap-post-charset Header in ASP.NET to Bypass WAFs Again!