Arne Swinnen arneswinnen.net

Authentication bypass on Uber’s Single Sign-On via subdomain takeover

arneswinnen.net·464w

Authentication bypass on Airbnb via OAuth tokens theft

arneswinnen.net·465w

Authentication bypass on Ubiquity’s Single Sign-On via subdomain takeover

arneswinnen.net·494w

Hack.LU 2016 CTF DataOnly Writeup

arneswinnen.net·499w

Hack.LU 2016 CTF CthCoin Writeup

arneswinnen.net·499w

How My Rogue Android App Could Monitor & Brute-force Your App’s Sensitive Metadata

arneswinnen.net·505w

How I Could Steal Money from Instagram, Google and Microsoft

arneswinnen.net·513w

HackerOne Web Authentication Endpoint Credentials Brute-Force Vulnerability

arneswinnen.net·516w

InstaBrute: Two Ways to Brute-force Instagram Account Credentials

arneswinnen.net·521w

How I Could Compromise 4% (Locked) Instagram Accounts

arneswinnen.net·529w

Log in to enable infinite scrolling