Advisories
Posts
Tools
Pentest

Posts

October 30, 2020

Real-life OIDC Security (I): Overview

This is the first post of a series on Single Sign-On and OpenID Connect 1.0 security. This post presents a high-level overview of observed issue patterns during my research on real-life OIDC security and proposes additions to the specification’s security considerations.

October 8, 2020

Hello World

This is the very first actual “blog post” on this site. As the main structure might indicate, future content will be categorized either as dedicated advisory on an observed vulnerability or as blog post on more high-level observations.

1
2