Apache Archiva Multiple XSS & CSRF Vulnerabilities

May 30, 2011 in security research, appsec, apache archiva

Multiple XSS and CSRF issues in Apache Archiva version 1.3.4. Disclosure blogpost.

WordPress UserId & Username Enumeration Exploit/PoC Script

May 11, 2011 in security research, appsec, wordpress

Simple VBScript using XMLHTTP to fetch usernames from a WordPress installation using the ?author= redirect feature.

June 11, 2010 in security research, appsec

Multiple XSS reported to Joomla! CMS. CVE-2010-1649 assigned.

Build, Break, Repeat
Security enthusiast and tinkerer of code
Kloudle | Appsecco | null | OWASP Bangalore