All Posts
Newest firstContext-Aware Content Discovery with Chameleon
An open-source content discovery tool that fingerprints the technology stack of a target and automatically selects calibrated wordlists.
ToolingRecon
Cache Poisoning at Scale
Identifying and exploiting over 70 cache poisoning vulnerabilities across major bug bounty programs, including GitHub, GitLab, Shopify and HackerOne.
Cache PoisoningCDN
Bypassing 2FA using OpenID Misconfiguration
A two factor authentication bypass caused by an over-permissive AMR configuration in an OpenID identity provider, reported as High severity.
OpenIDAuthentication
Cache Key Normalization DoS
Two new denial of service techniques based on keyed input, host header case normalization and path normalization, plus CVE-2020-7764 in Fastify.
Cache PoisoningDoS
Want this pointed at your stack?
The same process that produced the research above, aimed at your product instead of someone else's.
Request an engagement →