#owasp

2 posts

The webhook that reads the cloud's metadata

9/7/2026 • Michael

SSRF isn't solved by cleaning up the input, it's solved by controlling the output, in order of effectiveness

BOLA is not an authentication bug

9/6/2026 • Michael

Authentication is the door, object-level authorization is the lock on every drawer, most systems lock the door with great care and leave the drawers open