Research library
Only what can be published.
Most security work stays private by agreement, so this library is deliberately small. Entries are added when a finding can be discussed in public.
The first public entries are being prepared.
Until then, the disclosure archive lists acknowledgments that are already on the public record.
Areas this library covers
01Authentication bypassLogin flows, session handling and the assumptions between them.
02Broken access control & IDORObject references and role checks that hold until someone asks twice.
03Remote code executionDeserialization, injection and the routes from input to process.
04API securityUndocumented routes, mass assignment and inconsistent authorization.
05JWT securitySignature validation, key handling and token audience.
06Cloud securityStorage exposure, metadata services and over-broad roles.
07Privilege escalationMoving from a low-trust position to one the design never intended.
08Web application securityParser differentials, proxies and the gaps between layers.