What is Detectify?

Security

Thinking outside of the password manager box

password managers
https mitm vpn

Abuse MITM possible regardless of HTTPS

Auditor Cross Site Scripting Frans Rosén HTTPS Everywhere Linus Särud validation

XSS using quirky implementations of ACME http-01

AWS bug bounty Cloud Security Frans Rosén Google Cloud s3 buckets

Bypassing and exploiting Bucket Upload Policies and Signed URLs

2fa phone number

The danger of recycled phone numbers

host headers password managers Safari XSS

Scratching the surface of host headers in Safari

open redirect phishing social media

Changing the URL of social media sharing buttons

How I exploited ACME TLS-SNI-01 issuing Let’s Encrypt SSL-certs for any domain using shared hosting

Chrome Chrome extensions Facebook Frans Rosén XSS

Dissecting the Chrome Extension Facebook malware

AWS bug bounty Frans Rosén privacy XSS

A deep dive into AWS S3 access controls – taking full control over your assets