Bypassing Android’s Network Security Configuration

Written by: Adrian Villa

From Splunk 5.x to 7.0: Just what have you been missing out on?

Common CSRF prevention misconceptions

Written by: Angelo Mellos

When a web application SSRF causes the cloud to rain credentials & more

Written by: Soroush Dalili & Daniele Costa

tl;dr — This blog post reviews an interesting Server-Side Request Forgery (SSRF) technique against applications that are in cloud…

Request encoding to bypass web application firewalls

Cisco ASA series part two: Static analysis & datamining of Cisco ASA firmware

Written by: Aaron Adams…

WSSiP: A WebSocket Manipulation Proxy

Written by: Samantha Chalker

Compromising Apache Tomcat via JMX access

Written by: Daniele Costa

This blog post focuses on some interesting features of a Tomcat server configured to expose the Java Management Extension (JMX) service to external network interfaces for remote monitoring and management…