pontushanssen

Joined 3 years ago

Karma

51

Submissions

7

Member since

May 30

View on Hacker News

Recent submissions

Comment · 2 years ago

It was published 2024-01-11. The page has been updated to include the publish date. Thanks for the feedback!

Comment · 2 years ago

CVE-2023-6927 Keycloak vulnerability allows bypassing redirect URI validation which can be used as a vector for stealing authorization codes, access tokens and be used to redirect victims to arbitrary hosts.

Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens securityblog.omegapoint.se

108 pontushanssen 2 years ago 19 comments

Writeup: AWS API Gateway header smuggling and cache confusion securityblog.omegapoint.se

1 pontushanssen 3 years ago 0 comments

Removing header remapping from Amazon API Gateway aws.amazon.com

1 pontushanssen 3 years ago 0 comments

Defence in depth: building secure systems by design securityblog.omegapoint.se

1 pontushanssen 3 years ago 0 comments