The Curious Engineer

All blogs / Security

Doyensec's Blog

blog.doyensec.com

SecurityWeb development

’17’18’19’20’21’22’23’24’25’26
Posts
111 from 1 Mar 2017 to 26 Oct 2026
Posting
monthly (19 in the last year)
Kind
company blog
Feed
https://blog.doyensec.com/atom.xml

2026 18

  1. ElectroNG is now open source!
  2. Playing It SFAPE: Code Execution in Isolated User Mode
  3. One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts
  4. Page2
  5. The skb that wasn't freed - the Fragnesia primitive via Open vSwitch
  6. Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability
  7. Comparing AI Application Security Testing Platforms: Aikido vs. XBOW
  8. Introducing Session Switcher. Swap Burp Sessions with One Click!
  9. Comparing AI Application Security Testing Platforms
  10. Navigating Lax Load Balancers: When an Intersection Gets You Inside
  11. When Filenames Become Attack Surfaces: Weaponizing NASA's CFITSIO Extended Filename Syntax
  12. The Danger of Multi-SSO AWS Cognito User Pools
  13. CFITSIO Fuzzing: Memory Corruptions and a Codex-Assisted Pipeline
  14. The MCP AuthN/Z Nightmare
  15. Building a Secure Electron Auto-Updater
  16. Auditing Outline. Firsthand lessons from comparing manual testing and AI security platforms
  17. security advisory
  18. Intercepting OkHttp at Runtime With Frida - A Practical Guide

2025 13

  1. InQL v6.1.0 Just Landed with New Features and Contribution Swag! 🚀
  2. ksmbd - Exploiting CVE-2025-37947 (3/3)
  3. Yet Another Random Story: VBScript's Randomize Internals
  4. ksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3)
  5. Trivial C# Random Exploitation
  6. SCIM Hunting - Beyond SSO
  7. CSPT Resources
  8. !exploitable Episode Three - Devfile Adventures
  9. !exploitable Episode Two - Enter the Matrix
  10. !exploitable Episode One - Breaking IoT
  11. Common OAuth Vulnerabilities
  12. Bypassing File Upload Restrictions To Exploit Client-Side Path Traversal
  13. ksmbd vulnerability research

2024 14

  1. Unsafe Archive Unpacking: Labs and Semgrep Rules
  2. CSPT the Eval Villain Way!
  3. Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges
  4. Applying Security Engineering to Make Phishing Harder - A Case Study
  5. Windows Installer, Exploiting Custom Actions
  6. A Race to the Bottom - Database Transactions Undermining Your AppSec
  7. Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF
  8. Single Sign-On Or Single Point of Failure?
  9. Product Security Audits vs. Bug Bounty
  10. Internship Experiences at Doyensec
  11. A Look at Software Composition Analysis
  12. Unveiling the Prototype Pollution Gadgets Finder
  13. Introducing PoIEx - Points Of Intersection Explorer
  14. Kubernetes Scheduling And Secure Design

2023 17

  1. Office Documents Poisoning in SHVE
  2. Client-side JavaScript Instrumentation
  3. Introducing Session Hijacking Visual Exploitation (SHVE): An Innovative Open-Source Tool for XSS Exploitation
  4. InQL v5: A Technical Deep Dive
  5. Huawei Theme Manager Arbitrary Code Execution
  6. Streamlining Websocket Pentesting with wsrepl
  7. Messing Around With AWS Batch For Privilege Escalations
  8. Logistics for a Remote Company
  9. Reversing Pickles with r2pickledec
  10. Testing Zero Touch Production Platforms and Safe Proxies
  11. The Case For Improving Crypto Wallet Security
  12. Windows Installer EOP (CVE-2023-21800)
  13. SSRF Cross Protocol Redirect Bypass
  14. A New Vector For “Dirty” Arbitrary File Write to RCE
  15. Introducing Proxy Enriched Sequence Diagrams (PESD)
  16. Tampering User Attributes In AWS Cognito User Pools
  17. ImageMagick Security Policy Evaluator

2022 14

  1. safeurl for Go
  2. Let's speak AJP
  3. Recruiting Security Researchers Remotely
  4. Visual Studio Code Jupyter Notebook RCE
  5. The Danger of Falling to System Role in AWS SDK Client
  6. On Bypassing eBPF Security Monitoring
  7. Comparing Semgrep and CodeQL
  8. Diving Into Electron Web API Permissions
  9. ElectroNG, our premium SAST tool released!
  10. My Internship Experience at Doyensec
  11. Dependency Confusion
  12. Apache Pinot SQLi and RCE Cheat Sheet
  13. Introduction to VirtualBox security research
  14. H1.Jack, The Game

2021 3

  1. That single GraphQL issue that you keep missing
  2. Regexploit: DoS-able Regular Expressions
  3. Electron APIs Misuse: An Attacker’s First Choice

2020 15

  1. Psychology of Remote Work
  2. Novel Abuses On Wi-Fi Direct Mobile File Transfers
  3. InQL Scanner v3 - Just Released!
  4. Fuzzing JavaScript Engines with Fuzzilli
  5. CSRF Protection Bypass in Play Framework
  6. InQL Scanner v2 is out!
  7. Fuzzing TLS certificates from their ASN.1 grammar
  8. Researching Polymorphic Images for XSS on Google Scholar
  9. LibreSSL and OSS-Fuzz
  10. InQL Scanner
  11. Don't Clone That Repo: Visual Studio Code^2 Execution
  12. 2019 Gravitational Security Audit Results
  13. Signature Validation Bypass Leading to RCE In Electron-Updater
  14. Security Analysis of the Solo Firmware
  15. Heap Overflow in F-Secure Internet Gatekeeper

2019 9

  1. Internship at Doyensec
  2. One Bug To Rule Them All: Modern Android Password Managers and FLAG_SECURE Misuse
  3. Lessons in auditing cryptocurrency wallets, systems, and infrastructures
  4. Jackson gadgets - Anatomy of a vulnerability
  5. Electron Security Workshop
  6. Electronegativity 1.3.0 released!
  7. On insecure zip handling, Rubyzip and Metasploit RCE (CVE-2019-5624)
  8. Subverting Electron Apps via Insecure Preload
  9. Electronegativity is finally out!

2018 4

  1. Introducing burp-rest-api v2
  2. Instrumenting Electron Apps for Security Testing
  3. Electron Windows Protocol Handler MITM/RCE (bypass for CVE-2018-1000006 fix)
  4. GraphQL - Security Overview and Testing Tips

2017 4

  1. We're hiring - Join Doyensec!
  2. Staring into the Spotlight
  3. Modern Alchemy: Turning XSS into RCE
  4. Developing Burp Suite Extensions training