What is Detectify?

Frans Rosén

Frans Rosén – Security Ninja; Security Advisor at Detectify. Here’s the archive of original security research which Frans Rosén has published.

Account hijacking using “dirty dancing” in sign-in OAuth-flows

bug bounty Detectify Crowdsource Frans Rosén OAuth postmessage XSS
Popular tags XSS Detectify Crowdsource Frans Rosén bug bounty Detectify
Cloudkit Detectify Crowdsource Frans Rosén iOS

Hacking CloudKit – How I accidentally deleted your Apple Shortcuts

Frans Rosén / September 13, 2021
Frans Rosén load balancer Mathias Karlsson middleware vulnerabilities misconfigurations Nginx

Middleware, middleware everywhere – and lots of misconfigurations to fix

Frans Rosén / February 18, 2021
Get research and tips from Detectify security experts and the Crowdsource hacker community Subscribe to the Detectify Monthly Round-up
Auditor Cross Site Scripting Frans Rosén HTTPS Everywhere Linus Särud validation

XSS using quirky implementations of ACME http-01

September 4, 2018
AWS bug bounty Frans Rosén Google Cloud s3 buckets

Bypassing and exploiting Bucket Upload Policies and Signed URLs

August 2, 2018
Chrome Chrome extensions Facebook Frans Rosén XSS

Dissecting the Chrome Extension Facebook malware

August 31, 2017
AWS bug bounty Frans Rosén privacy XSS

A deep dive into AWS S3 access controls – taking full control over your assets

July 13, 2017
bug bounty Frans Rosén Github Mathias Karlsson

BountyDash – A local bug bounty statistics dashboard

June 15, 2017
Frans Rosén postmessage Slack

Hacking Slack using postMessage and WebSocket-reconnect to steal your precious token

February 28, 2017
bug bounty Fastly Frans Rosén Heroku Mathias Karlsson

Combining host header injection and lax host parsing serving malicious data

October 24, 2016
What is Detectify? Subscribe to newsletter Sign up for a free trial »
A security service for developers.