Dock12 sorintlab

Popular posts

1. Exploring UTF-16 and its oddities in JavaScript

   Uncovering the unexpected behaviors of JavaScript strings and the challenges posed by UTF-16 encoding

   Author: Luca Famà

   javascript unicode xss utf-16

2. Why Cross-Site Request Forgery is not dead

   While modern defenses have made CSRF vulnerabilities more challenging to exploit, emerging techniques still pose significant threats

   Author: Luca Famà

   CSRF SameSite Cookie Path Traversal

3. Common OAuth2 misconfigurations and vulnerabilities

   Let’s take a look at the most common OAuth2 misconfigurations that can lead to vulnerabilities

   Author: Luca Famà

   oauth misconfigurations authorization csrf

4. Protocol impersonation attacks with QUIC

   Exploring security risks in a ‘Secure by Design’ and modern transport protocol

   Author: Luca Famà

   QUIC HTTP/3 protocol impersonation DNS

5. Approaching R2R from an RE point of view

   Legit features often turn into something unexpected: an Insomni’hack Teaser 2024 challenge writeup

   Author: Cesare Pizzi

   Reverse engineering ctf dot net R2R

6. Is it possible to break RSA? (Part 1)

   RSA is an old but still secure public-key cryptosystem. However we need to know how it works to avoid mistakes that could introduce vulnerabilities..

   Author: Luca Famà

   rsa crypto math