What is Detectify?

Writeups

What’s happening in Security? Detectify Labs is the home to novel security writeups from trusted security researchers active in the community. Contributors include Frans Rosén, Mathias Karlsson, Fredrik N. Almroth, and more.

Common Security Vulnerabilities in Core AWS Services: Exploitation and Mitigation

Amazon web services AWS aws attack AWS security assessment AWS services Detectify
Popular tags XSS Detectify Crowdsource Frans Rosén bug bounty Detectify
bug bounty Detectify Crowdsource Frans Rosén OAuth postmessage XSS

Account hijacking using “dirty dancing” in sign-in OAuth-flows

Frans Rosén / July 6, 2022
Cloudkit Detectify Crowdsource Frans Rosén iOS

Hacking CloudKit – How I accidentally deleted your Apple Shortcuts

Frans Rosén / September 13, 2021
Get research and tips from Detectify security experts and the Crowdsource hacker community Subscribe to the Detectify Monthly Round-up
ccTLD DNS hijacking Domain hijacking Fredrik Almroth TLD takeover

How I hijacked the top-level domain of a sovereign state

Fredrik N. Almroth / January 15, 2021
PHP php malware

Investigation of PHP Web Shell Hexedglobals.3793 Variants

May 24, 2019
AWS bug bounty Frans Rosén Google Cloud s3 buckets

Bypassing and exploiting Bucket Upload Policies and Signed URLs

August 2, 2018
Detectify Crowdsource

GraphQL abuse: Bypass account level permissions through parameter smuggling

March 14, 2018
CSP Detectify Crowdsource Google Analytics

Using Google Analytics for data extraction

Linus Särud / January 19, 2018

How I exploited ACME TLS-SNI-01 issuing Let’s Encrypt SSL-certs for any domain using shared hosting

January 12, 2018
Amazon PayPal Public Information Security Questions

Security Questions are not secure

Linus Särud / December 20, 2017
What is Detectify? Subscribe to newsletter Sign up for a free trial »
A security service for developers.