research & things
talks
thoughts
about
tag - web
2025
12 May
UUIDs Should Not Replace Authorization
2024
29 Nov
Swiss Tax Adventures 2: The N-Day and the Rabbit Hole
20 Oct
Swiss Tax Adventures 1: The Forbidden Jar of XXE
09 Oct
Running mitmproxy on a Raspberry Pi
29 Feb
Instrumentalizing Electron: Proxy Injection
2023
25 Oct
Exfiltrating Data Like It's 1995
2022
23 Jan
Abusing User Habits with Evil Bookmarks