Latest Writeups & Articles

By : kaisec
JWTs for People Who Hunt Bugs, Not Blog Posts
Mar 17, 2026
By : kaisec
Most Bug Bounty Writeups are Recycled: Real Bugs are Hiding in the Specs
Mar 17, 2026
By : kaisec
Research
Replaced by a Goldfish
Mar 07, 2026
By : kaisec
Bug Bounty
Stop Ignoring WebSockets — There Are P1s to Be Found
Mar 07, 2026
By : kaisec
Bug Bounty
Hacking OAuth: The Direct Path to Account Takeover (ATO) Slug: hacking-oauth-account-takeover
Feb 27, 2026
By : kaisec
CTF Writeup
XSS-Leak: Leaking Cross-Origin Redirects
Feb 26, 2026
By : kaisec
Vulnerability Analysis
Google API Keys Weren't Secrets. But then Gemini Changed the Rules.
Feb 26, 2026
By : kaisec
Bug Bounty
From Zero to Paid Hunter: The Counter-Intuitive Bug Bounty Roadmap for 2026 Slug: bug-bounty-roadmap-2026
Feb 26, 2026