Neatly bypassing CSP

How to trick CSP in letting you run whatever you want

RCE in PHP or how to bypass disable_functions in PHP installations

Cache poisoning and other dirty tricks

by @bo0om, Wallarm Research

Caching is a great technology practice. It makes life better for everybody — clients get the data faster, servers expend fewer resources and so on. There is even a whole CDN industry that was built to deliver…

Exploring de-serialization issues in Ruby projects.

Ruby on Rails is a popular application platform that uses cookies to identify application sessions.

The cookie consists of two parts: cookie-value and signature. Whenever Rails gets a cookie, it verifies that the…

Extending fuzzing with Burp by FAST

I love Burp Suite, like really. It’s the most convenient tool to visualize what’s happening with…

Numbers game: Exploring IntegerOverflow vulnerability in a popular nginx web server.

By @aLLy , Wallarm Research

There was a very interesting vulnerability discovered in nginx, one of the most popular web/proxy/load balancing servers. This…

TensorFlow Dataset API for increasing training speed of Neural Networks

by M.Salnikov, Wallarm Research

Drupalgeddon Two.

New Drupal Vulnerability in Detail

By @aLLy

FAST or Burp or both?

Hello guys, time to talk details about Wallarm FAST (Framework for Application…

Sit-down with Wallarm CTO, Alex Golovko

I have had a chance to pose a few questions to Alexander Golovko, one of the co-founders of Wallarm and our CTO. Here are Alex’s reflections on Wallarm and some technology trends.