pontushanssen

3 ms·

1. 1.▲
   by pontushanssen 3y ago

   It was published 2024-01-11. The page has been updated to include the publish date. Thanks for the feedback!
2. 2.▲
   Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens(securityblog.omegapoint.se)

   108 points by pontushanssen 3y ago|19 comments
3. 3.▲
   by pontushanssen 3y ago

   CVE-2023-6927 Keycloak vulnerability allows bypassing redirect URI validation which can be used as a vector for stealing authorization codes, access tokens and be used to redirect victims to arbitrary hosts.
4. 4.▲
   Writeup: AWS API Gateway header smuggling and cache confusion(securityblog.omegapoint.se)

   1 points by pontushanssen 3y ago|0 comments
5. 5.▲
   Removing header remapping from Amazon API Gateway(aws.amazon.com)

   1 points by pontushanssen 3y ago|0 comments
6. 6.▲
   Defence in depth: building secure systems by design(securityblog.omegapoint.se)

   1 points by pontushanssen 3y ago|0 comments