Web 2.0

IDOR, SSRF, broken access control, XSS, auth flows. The classics, found on real targets, reported properly.

The first episode is in the edit.

Subscribe on YouTube to see it the day it goes out. It will land here too, with chapters and links.

Newsletter

Get the fix before the exploit goes viral.

One email when there is something to show: a new video, a write-up cleared for disclosure, or an advisory that hits a stack we cover. No weekly recap, no fear-selling.