Soroush Dalili
Home
Blog
Bug Bounty Invites
Advisories
Contact
Open search
Toggle theme
Notes & research
Blog
Application security, curious findings, and lessons from the details.
August 13, 2018
SMB hash hijacking & user tracking in MS Outlook
Read article
February 21, 2018
Bug Bounty vs Penetration Testing (Simple Unbiased Comparison)
Read article
February 20, 2018
Rare ASP.NET request validation bypass using request encoding
Read article
September 1, 2017
Additional notes on āA Forgotten HTTP Invisibility Cloakā talk!
Read article
August 24, 2017
Request encoding to bypass web application firewalls
Read article
August 24, 2017
When a web application SSRF causes the cloud to rain credentials & more
Read article
August 24, 2017
CVE-2017-8592 ā XMLHttpRequest in IE followed 307 redirections with additional or customised headers
Read article
October 1, 2016
Flash it baby!
Read article
June 11, 2015
Common Security Issues in Web-Based Payment Systems (& Gambling Apps)
Read article
April 1, 2015
Interesting XML Processing in Copy/Paste in Word and Outlook
Read article
Prev
1
2
3
4
5
ā¦
8
Next
Cookies