https://youst.in/research Write-ups on web application security, authentication bypasses and offensive security tooling. en https://youst.in/research/context-aware-content-discovery-with-chameleon https://youst.in/research/context-aware-content-discovery-with-chameleon An open-source content discovery tool that fingerprints the technology stack of a target and automatically selects calibrated wordlists. Sat, 10 Sep 2022 00:00:00 GMT https://youst.in/research/cache-poisoning-at-scale https://youst.in/research/cache-poisoning-at-scale Identifying and exploiting over 70 cache poisoning vulnerabilities across major bug bounty programs, including GitHub, GitLab, Shopify and HackerOne. Thu, 23 Dec 2021 00:00:00 GMT https://youst.in/research/bypassing-2fa-using-openid-misconfiguration https://youst.in/research/bypassing-2fa-using-openid-misconfiguration A two factor authentication bypass caused by an over-permissive AMR configuration in an OpenID identity provider, reported as High severity. Fri, 11 Jun 2021 00:00:00 GMT https://youst.in/research/cache-key-normalization-dos https://youst.in/research/cache-key-normalization-dos Two new denial of service techniques based on keyed input, host header case normalization and path normalization, plus CVE-2020-7764 in Fastify. Sat, 19 Dec 2020 00:00:00 GMT