Notes & research

Blog

Application security, curious findings, and lessons from the details.

December 25, 2009

Microsoft IIS Semi-Colon Vulnerability

November 16, 2009

Finding vulnerabilities of YaFtp 1.0.14 (a client-side FTP application)

January 5, 2009

Why using the “include” techniques are dangerous for the novice developers?

January 2, 2009

Incorrect solution to disable script execution by .htaccess