h3xStream's blog

Last month, I presented a workshop on Web Application Firewall (WAF) bypasses at Québec's Hackfest security conference . The workshop ga...

While tech-savvy people are very concerned about privacy, knowing where to find metadata leaks can be nebulous even for developers. In this ...

Log4J has been in the spotlight for the past two weeks for a new attack vector which relies on Java Naming and Directory Interface (JNDI). ...

Being able to bypass Web Application Firewall (WAF) depends on your knowledge about their behavior. Here is a cool technique th...

When we were looking at the interactions between the Outlook and the LinkedIn APIs, we encountered WebSocket communications that use...

In this blog post, we will look at the privacy issues with some of LinkedIn’s external APIs. We will demonstrate how it is p...

If you are testing the security of WordPress websites, you will likely have to look at the REST endpoints. By default, users can be listed ...