Writeups

IDOR Fallout: Leaking 2 Million Sensitive Files with a Simple Trick

Payment Page XSS: Bypassing Strict Sanitization through URI Structure

Sometimes, the best lessons in web development and security come from staring at a seemingly bulletproof application until its underlying mechanics finally crack. We had been deep in the trenches with