Thoughts on cybersecurity, vulnerability research, and making the internet safer.
How LookyLoo's document capture mode bypassed its own SSRF protections, and how the fix uses Playwright route handlers to filter secondary requests.
A look at how an incomplete fix from 2019 left MISP's auth key reset endpoint vulnerable to privilege escalation, and what the patch looks like.
How I found and reported a blind SQL injection in MISP's event and shadow attribute listing endpoints through unsanitized ordering parameters.
Cybercriminals are exploiting legitimate platforms and signup forms to bypass spam filters and spread malicious links. Here's how they do it and what we can do about it.
Fraudsters have found a clever way to abuse Google Forms' response notification feature to bypass spam filters and deliver phishing emails from official Google addresses.
A comprehensive guide on how to report phishing sites, get them blocked by browsers and antivirus providers, and ultimately taken down from the internet.