Egor Homakov

I wrote a post about CSRF tool  and readers noticed an intentional mistake in it — storing a token in a plain cookie can be exploited with c...

on reddit / HN This post in based on  an interesting trick  by  @typicalrabbit . UPD : This has been known since 2011 , but not fixed yet...

TL;DR  Nope, I didn't find a major breach, just an interesting detail in reCAPTCHA's design. CAPTCHA ain't no good for CSRF I...

I facepalm when  I hear about CSRF in popular websites. ( I was searching for them in the past  but then realized that's a boring waste ...

UPD : no wonder, I missed the fact that OAuth providers use static passwords and it cannot be legit 2nd factor, just makes 1st factor harde...

RJS (Ruby JavaScript) — a straightforward technique when server side (e.g. Rails app) responds with Javascript code and client-side eval-s i...

This post describes pitfalls of cross-frame navigation . It started to "feel wrong" from the very beginning, and yesterday I notic...

About sandbox. I don't like both idea and implementations of the Sandbox feature (part of so-called HTML5). Most of the articles abou...

I found new vectors and techniques for the detection attack from my previous post . There is a cross browser way to detect does certain URL ...

This is a short addition to the previous rants on OAuth problems. We've got Nir Goldshlager working on our side (he simply loves boun...

A while ago I found leaking document.referrer vulnerability and even used it to hack Facebook. It's Chrome's XSS Auditor again (se...

Previously on Github: XSS , CSRF ( My github followers are real , I gained followers using CSRF on bitbucket ), access bypass, mass assignm...

All the buzz started after the commit that changed my life. here are some highlights of my contributions, kind of digest. I did some basi...

TL;DR OAuth2 sucks. Please don't think about OAuth2 as about the next generation of OAuth1. They are completely different like color...

Meanwhile working hard on Pagebox. XHR proxy is done, looking forward your feedback TL;DR there is a way to detect current URL in iframe o...

View FAQ and proof of concept (Sinatra app) on Github   Here I explain the idea and problems I stumbled upon. Demo online Pagebox ...

TL;DR We (me and  @isciurus ) chained several different bugs in Facebook, OAuth2 and Google Chrome to craft an interesting exploit. Mallory...