Web Browser Address Bar Spoofing

The Powerful Resource of PHP Stream Wrappers

The Dangers of Open Git Folders

NoScript Vulnerability in Tor Browser

Analyzing Impact of WWW Subdomain on Cookie Security

Final Nail in the Coffin of HTTP: Chrome 68 and SSL/TLS Implementation

Leverage Browser Security Features to Secure Your Website

What the Reddit Hack Teaches Us About Web Security

Exploiting a Microsoft Edge Vulnerability to Steal Files

This blog post documents our Security Researcher Ziyahan Albeniz’s experiment in exploiting a Microsoft Edge browser vulnerability. He explains how a combination of SOP, the ability to email clickable links and a vulnerability in both the Windows Mail and Calendar applications actually enable the exploit. It includes his Proof of Exploit video.

Introducing the Same-origin Policy Whitepaper

This blog post outlines the contents of our Same-origin Policy Whitepaper: The Definitive Guide to Same-origin Policy. It includes a discussion of SOP misconceptions and implementations. It is jointly by Alex Baker, an independent Security Researcher, together with Ziyahan Albeniz and Emre Iyidogan, two of Netsparker’s Security Researchers.

Grammarly Vulnerability Allows Attackers To See Sensitive Data of Their Customers

Our security researcher discusses the potential implications of the cross-site request forgery (CSRF) issue found in Grammarly and the importance of cross-site request forgery protection.

Using the Same-Site Cookie Attribute to Prevent CSRF Attacks

This article looks into the details of how the Same-Site cookie attribute works and how it can be used to help prevent malicious cross-site request forgery (CSRF) attacks.