Notes & research

Blog

Application security, curious findings, and lessons from the details.

“ASPXErrorPath in URL” Technique in Scanning a .Net Web Application

Read article

SecProject Web AppSec Challenge Series 1 Results

Read article

SecProject Web AppSec Challenge – Series 1

Read article

Sometimes no Ninja skill is required to receive money from security bug bounty programs!

Read article

Drag and Drop XSS in Firefox by HTML5 (Cross Domain in frames)

Read article

Flash ExternalInterface.call() JavaScript Injection – can make the websites vulnerable to XSS

Read article

Unrestricted File Download V1.0 – Windows Server

Read article

Facebook Redirect Link – New Bypass Method – “:/” after the domain name

Read article

JSReg Bypasses – OLD

Read article

A Dotty Salty Directory: A Secret Place in NTFS for Secret Files!

Read article