1. Keys to the Kingdom Live Stripe Credentials Exposed via Unauthenticated OAuth Endpoint blog | 2026-05-12 11:55 | labs.cognisys.group | original ↗ | #information-disclosure | #api-security | #oauth
2. The Golden Role How a Simple API Logic Flaw Unlocked an Entire SaaS Platform blog | 2026-03-17 09:10 | labs.cognisys.group | original ↗ | #pentesting | #access-control | #privilege-escalation
3. Firefly v1.1.0: A smart black-box fuzzer for testing web applications blog | 2023-09-14 13:00 | yeswehack.com | original ↗ | #bug-bounty | #fuzzing | #release
4. Vulnerability Testing | Best Techniques for Assessing Risks vulnerability | 2021-09-17 19:00 | hackerone.com | original ↗ | #risk-management | #penetration-testing | #vulnerability-scanning