The UnboundCompute blog
Writing on web security
-
How a Container Escape Works: The cgroups v1 release_agent Technique
A container escape breaks a process out of its namespaces onto the host kernel. Walk the cgroups v1 release_agent technique, CVE-2022-0492, and…
-
What Is Web Cache Deception and How a Crafted URL Leaks Private Pages
Web cache deception tricks a CDN into storing a victim’s authenticated page under a URL the attacker can fetch. See the mechanism,…
-
How DNS Rebinding Works and Reaches Inside Your Private Network
A dns rebinding attack swaps a hostname’s IP after a page loads so a browser reaches private devices. See the mechanism, real…
-
What Is Subdomain Takeover and Why a Forgotten DNS Record Is Dangerous
A subdomain takeover happens when a forgotten DNS record points at a deleted cloud resource an attacker can claim. See the mechanism,…
-
What Is HTTP Request Smuggling
How http request smuggling works: two servers disagree on where a request ends, an attacker hides a second request, and the back…
-
How TLS Fingerprinting Works: JA3, JA4, and the ClientHello
How tls fingerprinting reads the TLS ClientHello to identify a client before any HTTP, how JA3 is computed, why it broke, and…
-
The AI Agent Attack Surface, Mapped Component by Component
A systematic map of the ai agent attack surface: model, prompt, tools, memory, retrieval, and the loop, and how one injected instruction…
-
What Is Indirect Prompt Injection and Why It Is So Hard to Stop
Indirect prompt injection hides commands in pages, emails, and documents an AI reads as data but obeys as instructions. See how it…
-
MCP Tool Poisoning: When the Tool Description Is the Attack
MCP tool poisoning hides instructions in a tool description or schema that the model reads but the user never sees. Learn how…
-
How Browser Fingerprinting Identifies You Without a Cookie
Browser fingerprinting reads your screen, fonts, GPU, and audio stack to build a stable identifier that survives clearing cookies and incognito mode.