1. Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover research | 2026-08-05 22:35 | semperis.com | original ↗ | #active-directory | #denial-of-service | #privilege-escalation
2. Dojo challenge #46 Ghost whisper solution blog | 2025-12-04 08:36 | yeswehack.com | original ↗ | #rce | #dojo | #writeup
3. Cookie Chaos: How to bypass __Host and __Secure cookie prefixes research | 2025-09-03 14:46 | portswigger.net | original ↗ | #cookies | #asp-net | #unicode
4. The Quest for the Shortest Domain blog | 2025-08-19 00:00 | josephthacker.com | original ↗ | #bug-bounty | #automation | #xss
5. Splitting the email atom: exploiting parsers to bypass access controls research | 2025-06-27 13:49 | portswigger.net | original ↗ | #rce | #email-security | #unicode
6. You're Invited: Delivering malware via Google Calendar invites and PUAs blog | 2025-05-13 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #npm
7. Bypassing character blocklists with unicode overflows research | 2025-01-29 08:10 | portswigger.net | original ↗ | #burp-suite | #web-security | #unicode
8. Unearthing Z͌̈́̾a͊̈́l͊̿g̏̉͆o̾̚̚S̝̬ͅc̬r̯̼͇ͅi̼͖̜̭͔p̲̘̘̹͖t̠͖̟̹͓͇ͅ with visual fuzzing research | 2021-06-02 13:11 | portswigger.net | original ↗ | #fuzzing | #portswigger | #javascript
9. Hacking Unicode Like a Boss vulnerability | 2020-02-28 00:00 | bugcrowd.com | original ↗ | #github | #guest-post | #password-reset
Skip to content