1.How I dumped users’ passports from the exchangeblog | 2026-06-11 10:25 | hackenproof.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #data-exposure
2.How to Defend Against Password Guessing Attacksblog | 2025-06-13 04:11 | semperis.com | Original ↗ | .md | #active-directory | #credential-security | #identity-security
3.Cracking Password Reset Mechanismsblog | 2025-04-24 14:23 | blog.sentry.security | Original ↗ | .md | #account-takeover | #web-security | #brute-force
4.PimpMyBurp #11 – Master Signed Token Exploits with SignSaboteurblog | 2024-11-27 14:00 | yeswehack.com | Original ↗ | .md | #burp-suite | #authentication-bypass | #web-security
5.How to Defend Against a Password Spraying Attackblog | 2024-06-16 19:46 | semperis.com | Original ↗ | .md | #active-directory | #detection | #mfa
6.Introducing SignSaboteur: forge signed web tokens with easeresearch | 2024-06-04 07:25 | portswigger.net | Original ↗ | .md | #burp-suite | #authentication | #jwt
7.Rate Limiting Strategies: Protecting Your API from DDoS and Brute Force Attacksblog | 2024-02-23 01:05 | hackerone.com | Original ↗ | .md | #api-security | #hackerone | #throttling
8.Why TOTP Won’t Cut It (And What to Consider Instead)blog | 2024-01-18 00:00 | netspi.com | Original ↗ | .md | #web-security | #authentication | #mfa
9.Turbo Intruder: Embracing the billion-request attackresearch | 2022-08-16 09:14 | portswigger.net | Original ↗ | .md | #burp-suite | #web-security | #portswigger
10.Lessons Learned on Brute-forcing RMI-IIOP With RMIScoutblog | 2020-12-08 00:00 | bishopfox.com | Original ↗ | .md | #penetration-testing | #security-tools | #brute-force
11.RMIScout: Safely and Quickly Brute-Force Java RMI Interfaces for Code Executionblog | 2020-05-26 00:00 | bishopfox.com | Original ↗ | .md | #java | #deserialization | #penetration-testing
12.64 Bits ought to be enough for anybody!blog | 2019-11-27 11:01 | blog.trailofbits.com | Original ↗ | .md | #cloud | #gpu | #performance
13.SolarWinds Serv-U Managed File Transfer – Insufficient Session ID Entropyadvisory | 2018-05-14 00:00 | CVE-2018-10240 | bishopfox.com | Original ↗ | .md | #brute-force | #solarwinds | #session-hijacking
14.CAPTCHAs Done Right?blog | 2018-03-09 00:00 | netspi.com | Original ↗ | .md | #burp-suite | #web-security | #authentication
15.Targeting RSA Emergency Access Tokencodes for Fun and Profitblog | 2017-06-13 00:00 | netspi.com | Original ↗ | .md | #authentication | #brute-force | #mfa-bypass
16.Targeting Passwords for Managed and Federated Microsoft Accountsblog | 2017-05-02 00:00 | netspi.com | Original ↗ | .md | #cloud | #recon | #brute-force
17.Cracking Credit Card Hashes with PowerShellblog | 2013-06-13 00:00 | netspi.com | Original ↗ | .md | #powershell | #password-cracking | #brute-force
18.GIAC paper on Burp Intruderblog | 2009-11-02 10:56 | portswigger.net | Original ↗ | .md | #cloud | #portswigger | #burp-intruder