Security Cases

Real-world vulnerability research and attack chain walkthroughs. See how single misconfigurations cascade into critical compromises.

Filter by
All²²
API Security⁰⁷
Information Disclosure⁰⁷
Access Control⁰⁶
Infrastructure⁰⁴
Misconfiguration⁰⁴
Cryptography⁰³

Enumerating Internal Architecture Through a Container Registry
Container Registry Read case
Publishing Your Complete API Surface by Accident
Openapi Read case
Nine Hosts, One Wildcard, Zero Access Control
Cors Read case
Enterprise GitLab With the Front Door Wide Open
Access Control Read case
Chaining a Subdomain XSS Into API Token Theft
XSS Read case
The Service That Trusted Every Certificate
TLS Read case
Encrypting Voter Data With a Broken Cipher
Cryptography Read case
The Staging Server No One Password-Protected
Information Disclosure Read case
Poisoning Analytics Through an Open Endpoint
Access Control Read case
The Silent Seat That Disappeared
Business Logic Read case
Five Subdomains, Five Takeovers, One Afternoon
Subdomain Takeover Read case
Kubernetes Blueprints Left on the Doorstep
Information Disclosure Read case
The iframe That Could Rewrite Ballot Templates
Postmessage Read case
Searching for Every Voter With a Single Percent Sign
SQL Injection Read case
The Subdomain Someone Else Already Owned
Subdomain Takeover Read case
652 Repositories, Zero Authentication
Docker Read case
The Login Link That Let Anyone In
Session Fixation Read case
When Mock Cryptography Ships to Production
Cryptography Read case
What Goes Into a Security Assessment: From Reconnaissance to Remediation
Methodology Read case
The Trusted Email That Wasn't
Account Takeover Read case
Half a Billion Profiles Behind a User-Agent String
Idor Read case
The Trailing Slash That Bypassed Authentication
Authentication Bypass Read case

Newsletter

Get each new security case study by email

Follow new findings, exploit chains, and remediation lessons without waiting for the exit-intent popup.

No spam. Unsubscribe anytime.