Web Browser Address Bar Spoofing

Tue, 20 Nov 2018

PHP Wrappers, Streams & Local File Intrusion (LFI)

Wed, 14 Nov 2018

The Dangers of Open Git Folders

Thu, 18 Oct 2018

NoScript Vulnerability in Tor Browser

Thu, 11 Oct 2018

Analyzing Impact of WWW Subdomain on Cookie Security

Thu, 04 Oct 2018

Final Nail in the Coffin of HTTP: Chrome 68 and SSL/TLS Implementation

Thu, 30 Aug 2018

Leverage Browser Security Features to Secure Your Website

Tue, 14 Aug 2018

What the Reddit Hack Teaches Us About Web Security

Tue, 14 Aug 2018

Exploiting a Microsoft Edge Vulnerability to Steal Files

Wed, 01 Aug 2018

This blog post documents our Security Researcher Ziyahan Albeniz’s experiment in exploiting a Microsoft Edge browser vulnerability. He explains how a combination of SOP, the ability to email clickable links and a vulnerability in both the Windows Mail and Calendar applications actually enable the exploit. It includes his Proof of Exploit video.

Introducing the Same-origin Policy Whitepaper

Fri, 06 Apr 2018

This blog post outlines the contents of our Same-origin Policy Whitepaper: The Definitive Guide to Same-origin Policy. It includes a discussion of SOP misconceptions and implementations. It is jointly by Alex Baker, an independent Security Researcher, together with Ziyahan Albeniz and Emre Iyidogan, two of Netsparker’s Security Researchers.

Grammarly Vulnerability Allows Attackers To See Sensitive Data of Their Customers

Wed, 22 Nov 2017

Our security researcher discusses the potential implications of the cross-site request forgery (CSRF) issue found in Grammarly and the importance of cross-site request forgery protection.

SameSite Cookie Attribute: Preventing CSRF SameSite Exploits

Tue, 23 Aug 2016

This article looks into the details of how the Same-Site cookie attribute works and how it can be used to help prevent malicious cross-site request forgery (CSRF) attacks.