KNOWLEDGE BASE
Technical Writeups & Analysis
Detailed architectural writeups, exploit mechanics, root cause analyses, and defensive patterns. Authored for security researchers, software engineers, and application architects.
API
API Security
7 min read
2026-07-22A deep dive into how decoupled microservice resolvers in Apollo Federation can fail to propagate tenant authorization contexts, leading to stealthy data cross-contamination.
#GraphQL
#BOLA
#Authorization
#Microservices
#Apollo
Web
Server-Side Request Handling
9 min read
2026-05-18Exploring why synchronous URL validation fails when background task queues fetch webhook targets asynchronously without re-validating DNS resolutions.
#SSRF
#DNS Rebinding
#Webhooks
#Cloud Security
Web
Business Logic
6 min read
2026-02-15Analyzing concurrent HTTP requests and time-of-check to time-of-use (TOCTOU) flaws in distributed idempotency implementations.
#Race Condition
#Idempotency
#Concurrency
#Redis