/blog/tags/web-security
web-security
2 articles
- I Thought I Found a Subdomain Takeover. I Had Not.A false-positive investigation showing why suspicious DNS and verification records did not establish a claimable third-party resource.7 min read
- The Invoice Number Changed. Did the Authorization Decision?A historical invoice authorization concern recast as a controlled two-account method for testing and preventing broken object-level authorization.6 min read