What is Detectify?

Frans Rosén

Frans Rosén – Security Ninja; Security Advisor at Detectify. Here’s the archive of original security research which Frans Rosén has published.

The story of EV-SSL, AWS and trailing dot domains

Frans Rosén Hostile Subdomain takeover SSL
Frans Rosén Slack XSS

Using Chrome’s web-custom-data UTI to inject a stored XSS in Slack

bug bounty Bugcrowd Cross Site Scripting Frans Rosén XSS

Frans Rosén’s Bugcrowd Guest Blog: Using a Braun Shaver to Bypass XSS Audit and WAF

Get research and tips from Detectify security experts and the Crowdsource hacker community Subscribe to the Detectify Monthly Round-up
Frans Rosén Patreon Remote Code Execution Werkzeug Debugger

How Patreon got hacked – Publicly exposed Werkzeug Debugger

bug bounty Frans Rosén XSS

Building an XSS polyglot through SWF and CSP

Frans Rosén

The lesser known pitfalls of allowing file uploads on your website