Soroush Dalili
Home
Blog
Bug Bounty Invites
Advisories
Contact
Open search
Toggle theme
Notes & research
Blog
Application security, curious findings, and lessons from the details.
April 24, 2019
Exploiting Deserialisation in ASP.NET via ViewState
Read article
April 24, 2019
Yet Other Examples of Abusing CSRF in Logout
Read article
April 17, 2019
How to win BIG and even more!
Read article
March 26, 2019
Finding and Exploiting .NET Remoting over HTTP using Deserialisation
Read article
December 20, 2018
More research on .NET deserialization
Read article
December 19, 2018
Feel honoured to be there again after 8 years: Top 10 Web Hacking Techniques of 2017
Read article
December 19, 2018
Story of my two (but actually three) RCEs in SharePoint in 2018
Read article
August 13, 2018
ASP.NET resource files (.RESX) and deserialization issues
Read article
August 13, 2018
MS 2018 Q4 – Top 5 Bounty Hunter for 2 RCEs in SharePoint Online
Read article
August 13, 2018
WAF Bypass Techniques – Using HTTP Standard and Web Servers’ Behaviour
Read article
Prev
1
2
3
4
…
8
Next
Cookies