What is Detectify?

Writeups

What’s happening in Security? Detectify Labs is the home to novel security writeups from trusted security researchers active in the community. Contributors include Frans Rosén, Mathias Karlsson, Fredrik N. Almroth, and more.

Guest Blog: Don’t Leave your Grid Wide Open

Detectify Crowdsource Peter Jaric Selenium Grid
Popular tags XSS Detectify Crowdsource Frans Rosén bug bounty Detectify
Chrome privacy Tinder

TrackMania – a Chrome plugin to stalk your friends on Tinder

September 26, 2017
Detectify Crowdsource DNS spoofing vulnerability

Guest blog: Bypassing domain control verification with DNS response spoofing

September 11, 2017
Get research and tips from Detectify security experts and the Crowdsource hacker community Subscribe to the Detectify Monthly Round-up
Chrome Chrome extensions Facebook Frans Rosén XSS

Dissecting the Chrome Extension Facebook malware

August 31, 2017
Tesla XSS

How we invented the Tesla DOM DOOM XSS

July 27, 2017
AWS bug bounty Frans Rosén privacy XSS

A deep dive into AWS S3 access controls – taking full control over your assets

July 13, 2017
Detectify Crowdsource Persistent XSS Team Tailor XSS

How I found a persistent XSS affecting thousands of career sites

June 28, 2017
login/logout CSRF Mathias Karlsson

Login/logout CSRF: Time to reconsider?

March 15, 2017
Frans Rosén postmessage Slack

Hacking Slack using postMessage and WebSocket-reconnect to steal your precious token

February 28, 2017
Mathias Karlsson SQL Injection

SQLi in INSERT worse than SELECT

February 14, 2017
What is Detectify? Subscribe to newsletter Sign up for a free trial »
A security service for developers.