1.Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeoverresearch | 2026-08-05 22:35 | semperis.com | Original ↗ | .md | #active-directory | #denial-of-service | #privilege-escalation
2.Dojo challenge #46 Ghost whisper solutionblog | 2025-12-04 08:36 | yeswehack.com | Original ↗ | .md | #rce | #dojo | #writeup
3.Unicode surrogates conversion to (simplified) replacement charactersresearch | 2025-11-10 00:00 | lab.ctbb.show | Original ↗ | .md | #web-security | #unicode | #surrogate
4.Cookie Chaos: How to bypass __Host and __Secure cookie prefixesresearch | 2025-09-03 14:46 | portswigger.net | Original ↗ | .md | #cookies | #asp-net | #unicode
5.The Quest for the Shortest Domainblog | 2025-08-19 00:00 | josephthacker.com | Original ↗ | .md | #bug-bounty | #automation | #xss
6.Splitting the email atom: exploiting parsers to bypass access controlsresearch | 2025-06-27 13:49 | portswigger.net | Original ↗ | .md | #rce | #email-security | #unicode
7.You're Invited: Delivering malware via Google Calendar invites and PUAsblog | 2025-05-13 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
8.Bypassing character blocklists with unicode overflowsresearch | 2025-01-29 08:10 | portswigger.net | Original ↗ | .md | #burp-suite | #web-security | #unicode
9.Unearthing Z͌̈́̾a͊̈́l͊̿g̏̉͆o̾̚̚S̝̬ͅc̬r̯̼͇ͅi̼͖̜̭͔p̲̘̘̹͖t̠͖̟̹͓͇ͅ with visual fuzzingresearch | 2021-06-02 13:11 | portswigger.net | Original ↗ | .md | #fuzzing | #portswigger | #javascript
10.Hacking Unicode Like a Bossvulnerability | 2020-02-28 00:00 | bugcrowd.com | Original ↗ | .md | #github | #guest-post | #password-reset