Token Hijacking via PDF
PDF files are everywhere and they can be used to hack your web application. Imagine that the attacker prepares a
Read more
44CON
Bypassing CSP via ajax.googleapis.com
Content Security Policy (CSP) is the number one defensive technology in modern web applications. Many developers add ajax.googleapis.com to CSP definitions, because
Read more
Exploiting Race Conditions
A race condition attack is one of the most dangerous and underestimated attacks on modern web applications. It’s related to
Read more
Would you like to play a game?
What we are offering: a free-form wargame for up to 90 players. The game will replicate a typical cyber security
Read more
44CON 2020 is cancelled
Apologies for the long silence, these have been crazy months… The government finally issued rules that mean we can’t hold
Read more