Notes & research

Blog

Application security, curious findings, and lessons from the details.

MongoDB NoSQL Injection with Aggregation Pipelines

Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP.NET Framework (CVE-2023-36899 & CVE-2023-36560)

Anchor Tag XSS Exploitation in Firefox with Target=”_blank”

Thirteen Years On: Advancing the Understanding of IIS Short File Name (SFN) Disclosure!

November 1, 2020

My MDSec Blog Posts so far in 2020/2021!

September 21, 2019

File Upload Attack using XAMLX Files

August 16, 2019

Uploading web.config for Fun and Profit 2

IIS Application vs. Folder Detection During Blackbox Testing

Danger of Stealing Auto Generated .NET Machine Keys

x-up-devcap-post-charset Header in ASP.NET to Bypass WAFs Again!