Notes & research

Blog

Application security, curious findings, and lessons from the details.

Skype Privacy Concern: It sends detected numbers + URLs to its server!

Read article

Excel Advanced Search Add-In Application

Read article

NoScript New Bypass Method by Unicode in ASP

Read article

New update – July 2010

Read article

IIS5.1 Directory Authentication Bypass by using “:$I30:$Index_Allocation”

Read article

Opera Browser – Scroll Information Leakage

Read article

Cross Site URL Hijacking by using Error Object in Mozilla Firefox

Read article

New Method: Role of the “/” character in mapping the website directories! – Webservers fault?

Read article

Improve File Uploaders’ Protections – Bypass Methods- Rev. 1.0

Read article

IE7-8 drive list enumeration!

Read article