1.Hybrid Protocol: The JSON Upgradeblog | 2026-02-23 00:00 | bughunters.google.com | Original ↗ | .md | #passkeys | #authentication | #fido
2.Unexpected security footguns in Go's parsersblog | 2025-06-18 11:00 | CVE-2020-16250 | blog.trailofbits.com | Original ↗ | .md | #authentication-bypass | #deserialization | #go
3.Why REST Supplanted SOAP for Cross-Application Communicationblog | 2024-03-11 03:19 | hackerone.com | Original ↗ | .md | #http | #soap | #json
4.Safely Handling Large Integers in JSON: Best Practices and Pitfallsblog | 2024-01-12 09:24 | hackerone.com | Original ↗ | .md | #javascript | #json | #bigint
5.An Exploration of JSON Interoperability Vulnerabilitiesblog | 2021-02-25 00:00 | bishopfox.com | Original ↗ | .md | #vulnerability-research | #security-research | #json
6.Graphtage: A New Semantic Diffing Toolblog | 2020-08-28 11:00 | blog.trailofbits.com | Original ↗ | .md | #open-source | #tooling | #json
7.The new configuration libraryblog | 2018-08-16 15:35 | portswigger.net | Original ↗ | .md | #burp-suite | #portswigger | #scanner
8.Capture The Flag Solution: reversing the passwordblog | 2017-08-13 00:00 | hackerone.com | Original ↗ | .md | #ctf | #reverse-engineering | #json
9.Beautifying JSON in Burpblog | 2017-05-16 00:00 | netspi.com | Original ↗ | .md | #burp-suite | #tooling | #burp-extension
10.Attacking JavaScript Web Service Proxies with Burpblog | 2017-02-14 00:00 | netspi.com | Original ↗ | .md | #javascript | #json | #web-pentesting
11.Playing with Content-Type – XXE on JSON Endpointsblog | 2015-04-20 00:00 | netspi.com | Original ↗ | .md | #pentesting | #web-security | #ssrf