Cached and Confused — A Story of Cache Deception
A private API turned public — not by the classic extension trick, but by a cache rule scoped to the wrong parent path.
Home
Recent Posts
Ghost in the Object — How OOP Design Patterns Become Attack Patterns
Mass assignment is just the beginning. A framework for five OOP misuse patterns that turn clean object design into exploitable business logic bugs.
Split the payload, not the cheque — Five P3s walk into a bar. One critical walks out.
Dangling markup, DOM clobbering, CSS injection, and a JS bridge — five low-severity primitives, chained into one Android account takeover.