Web Security
Web Cache Poisoning: Exploiting HTTP Implementation Discrepancies
Technical analysis of web cache poisoning attacks leveraging unkeyed headers and cache key normalization differences between proxies and origin servers.
2 min read
Web Security
Application security, HTTP smuggling, and modern web attacks.
Web Security
CVE-2021-44228 Log4Shell: Root Cause, Exposure Mapping, and Detection
A real-world case study of Log4Shell, the Apache Log4j remote code execution vulnerability, with practical guidance for asset discovery, patching, and detection.
4 min read