Forensics

Automating local DTD discovery for XXE exploitation

Beware of the Magic SpEL(L) - Part 1 (CVE-2018-1273)

Beware of the Magic SpEL(L) – Part 2 (CVE-2018-1260)

Bypassing ModSecurity WAF

Creating A Custom View for WebSocket in ZAP

Deanonymizing LinkedIn Users

Emails Disclosure on WordPress

ESI Injection Part 2: Abusing specific implementations

FindSecBugs officially an OWASP project

The Banking Surveillance Industrial Complex