Deeper research into vulnerability classes, exploitation techniques and tooling. The cards below are examples of the format real entries will follow.
A writeup of a technique for evading common rate-limiting middleware using inconsistent header parsing between proxy layers.
Common object-reference patterns found while testing mobile app APIs, and how to systematically hunt for them.
More research coming soon — real entries will replace these examples as they're published.