The UnboundCompute blog
Writing on web security
-
How to Test Access Control: A Step by Step Method for Web Apps and APIs
How to test access control in a web app or API: the accounts to set up, six steps in order, what a…
-
Privilege Escalation Examples: Five Ways an Ordinary Account Becomes an Admin
Five privilege escalation examples in a web app, each with the request that causes it: writable role fields, stale tokens, invite abuse,…
-
Stored XSS Example: How One Saved Comment Runs in Everyone Else’s Browser
A worked stored XSS example: the request that plants the script, the page that runs it, where the bug really hides, and…
-
Business Logic Vulnerability Examples: Five Valid Requests That Break the Rules
Five business logic vulnerability examples with real requests: client set prices, negative quantities, reused coupons, skipped steps, and reset trials.
-
Broken Access Control Examples: Five Requests That Should Have Been Denied
Five broken access control examples with the exact requests and responses, why each one looks like valid traffic, and how to find…
-
BadUSB Attack: When a USB Stick Pretends to Be Your Keyboard
A BadUSB attack reprograms a USB stick to pose as a keyboard and type commands your computer trusts. Learn how HID spoofing…
-
DMA Attack Over Thunderbolt: Reading Memory Past the Lock Screen
A DMA attack rides Thunderbolt or PCIe to read and write locked RAM directly. Learn how it skips the login prompt and…
-
Cold Boot Attack: How Encryption Keys Survive a Power Off
A cold boot attack reads disk encryption keys from RAM after the power is cut. Learn how DRAM remanence works, the chilling…
-
Evil Maid Attack: What Brief Physical Access Really Costs You
An evil maid attack turns a few minutes with your powered off laptop into stolen disk keys. See how it works, why…
-
Lateral Movement: How One Foothold Becomes the Whole Cluster
Lateral movement turns one hacked host into the whole cluster. See how attackers reuse credentials hop by hop, and the controls that…