What is Detectify?

Frans Rosén

Frans Rosén – Security Ninja; Security Advisor at Detectify. Here’s the archive of original security research which Frans Rosén has published.

Middleware, middleware everywhere – and lots of misconfigurations to fix

featured Frans Rosén load balancer Mathias Karlsson middleware vulnerabilities misconfigurations Nginx
Auditor Cross Site Scripting Frans Rosén HTTPS Everywhere Linus Särud validation

XSS using quirky implementations of ACME http-01

AWS bug bounty Frans Rosén Google Cloud s3 buckets

Bypassing and exploiting Bucket Upload Policies and Signed URLs

Get research and tips from Detectify security experts and the Crowdsource hacker community Time... to subscribe to the Detectify Monthly Round-up
Chrome Chrome extensions Facebook Frans Rosén XSS

Dissecting the Chrome Extension Facebook malware

AWS bug bounty Frans Rosén privacy XSS

A deep dive into AWS S3 access controls – taking full control over your assets

bug bounty Frans Rosén Github Mathias Karlsson

BountyDash – A local bug bounty statistics dashboard

Frans Rosén postmessage Slack

Hacking Slack using postMessage and WebSocket-reconnect to steal your precious token

bug bounty Fastly Frans Rosén Heroku Mathias Karlsson

Combining host header injection and lax host parsing serving malicious data

Frans Rosén Hostile Subdomain takeover SSL

The story of EV-SSL, AWS and trailing dot domains

Frans Rosén Slack XSS

Using Chrome’s web-custom-data UTI to inject a stored XSS in Slack