BLOG

This is a story of what both I and Google engineers considered to be an SSRF vulnerability in Google Calendar – but turned out to be some...

Let’s start at the end. This one got me seriously confused. It all started a few months ago when a colleague was hacking away at some...

Tl;dr: I’ve recently been playing around with Google services, poking here and there for security vulnerabilities. It’s been a quite a...

How Facebook infrastructure can be used to perform DDoS. As a penetration tester, examining proprietary applications and repeatedly...