c0c0n Security Conference 2011 - CTF Walkthrough

October 16, 2011 in conference, appsec, ctf, walkthrough

Writeup of the Capture the Flag event at c0c0n 2011.

Apache Archiva Multiple XSS & CSRF Vulnerabilities

May 30, 2011 in security research, appsec, apache archiva

Multiple XSS and CSRF issues in Apache Archiva version 1.3.4. Disclosure blogpost.

May 11, 2011 in security research, appsec, wordpress

Simple VBScript using XMLHTTP to fetch usernames from a WordPress installation using the ?author= redirect feature.

June 11, 2010 in security research, appsec

Multiple XSS reported to Joomla! CMS. CVE-2010-1649 assigned.