01 / THE NOTEBOOK

Research & writing.

Vulnerabilities, trust boundaries, and the details worth writing down. A personal collection of research and technical notes.

Browse the research filesOPEN DIRECTORY

INDEX

Breaking the silo

Cross-origin communication, trust boundaries, and the anatomy of postMessage XSS.

Web securityXSSpostMessage

Published Oct 2024

PERSONAL RESEARCH ARCHIVE01 / 06

06 entries / all topicsSave something for later

Research / 01

Cross-origin communication, trust boundaries, and the anatomy of postMessage XSS.

Web securityXSSpostMessage

Research / 02

A collection of notes on endpoint visibility and red team techniques.

Red teamEDR

Research / 03

Exploring injection patterns, filters, and modern application attack surfaces.

Web securitySQL injection

Research / 04

Following a server-side request beyond the application's trust boundary.

Web securityCloud

Research / 05

Algorithms, signatures, and the assumptions that make authentication fail.

Web securityJWT

Research / 06

Enumeration, authentication, and paths through a Windows domain.

Active DirectoryWindows