Token Hijacking via PDF
PDF files are everywhere and they can be used to hack your web application. Imagine that the attacker prepares a
Read more
Author: Nathalie
Bypassing CSP via ajax.googleapis.com
Content Security Policy (CSP) is the number one defensive technology in modern web applications. Many developers add ajax.googleapis.com to CSP definitions, because
Read more
Exploiting Race Conditions
A race condition attack is one of the most dangerous and underestimated attacks on modern web applications. It’s related to
Read more
December training
We are back with some training for you in December. Check out these amazing courses!
Read more
Would you like to play a game?
What we are offering: a free-form wargame for up to 90 players. The game will replicate a typical cyber security
Read more