August 13, 2018

SMB hash hijacking & user tracking in MS Outlook

February 21, 2018

Bug Bounty vs Penetration Testing (Simple Unbiased Comparison)

February 20, 2018

Rare ASP.NET request validation bypass using request encoding

September 1, 2017

Additional notes on “A Forgotten HTTP Invisibility Cloak” talk!

August 24, 2017

Request encoding to bypass web application firewalls

August 24, 2017

When a web application SSRF causes the cloud to rain credentials & more

August 24, 2017

CVE-2017-8592 – XMLHttpRequest in IE followed 307 redirections with additional or customised headers

October 1, 2016

Flash it baby!

June 11, 2015

Common Security Issues in Web-Based Payment Systems (& Gambling Apps)

April 1, 2015

Interesting XML Processing in Copy/Paste in Word and Outlook

Cookies