Doyensec's Blog blog.doyensec.com

CSPT the Eval Villain Way!

blog.doyensec.com·75w

Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges

blog.doyensec.com·84w

Applying Security Engineering to Make Phishing Harder - A Case Study

blog.doyensec.com·86w

Windows Installer, Exploiting Custom Actions

blog.doyensec.com·95w

A Race to the Bottom - Database Transactions Undermining Your AppSec

blog.doyensec.com·96w

Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF

blog.doyensec.com·70w·Lobsters

Single Sign-On Or Single Point of Failure?

blog.doyensec.com·99w

Product Security Audits vs. Bug Bounty

blog.doyensec.com·106w

Internship Experiences at Doyensec

blog.doyensec.com·112w

A Look at Software Composition Analysis

blog.doyensec.com·113w

Unveiling the Prototype Pollution Gadgets Finder

blog.doyensec.com·117w

Introducing PoIEx - Points Of Intersection Explorer

blog.doyensec.com·119w

Kubernetes Scheduling And Secure Design

blog.doyensec.com·120w

Office Documents Poisoning in SHVE

blog.doyensec.com·132w

Client-side JavaScript Instrumentation

blog.doyensec.com·138w

Introducing Session Hijacking Visual Exploitation (SHVE): An Innovative Open-Source Tool for XSS Exploitation

blog.doyensec.com·141w

InQL v5: A Technical Deep Dive

blog.doyensec.com·143w

Huawei Theme Manager Arbitrary Code Execution

blog.doyensec.com·146w

Streamlining Websocket Pentesting with wsrepl

blog.doyensec.com·147w

Messing Around With AWS Batch For Privilege Escalations

blog.doyensec.com·152w

Log in to enable infinite scrolling