Blog

AppSec Blog

Web Security

PHP2Shell: Two critical PHP vulnerabilities require immediate patching

Web Security

Cross Site Cookie Manipulation

Web Security

CVSS: Characterizing and Scoring Vulnerabilities

Web Security

Acquiring Data with CSS Selectors and Javascript on Time Based Attacks

Web Security

Why Framework Choice Matters in Web Application Security

Web Security

Using Session Puzzling to Bypass Two-Factor Authentication

Web Security

DNSFS: Is it possible to use DNS as a file system?

Web Security

Clickjacking Attack on Facebook: How a Tiny Attribute Can Save the Corporation

Web Security

Clickjacking Attack on Facebook: How a Tiny Attribute Can Save the Corporation