Introduction When you see a callback control in a JSONP endpoint doesn't that make you want to execute XSS? But, there&...

This blog post is a brief presentation of  "Same Origin Method E...

It has been a long time since I updated this blog since I focused on company blogs and Black Hat presentations for the last couple of year...

Deep Analysis of CVE-2014-0502 – A Double Free Story The Adobe Flash Player zero-day that was part of a targeted attack that infected...

The Kernel is calling a zero(day) pointer – CVE-2013-5065 – Ring Ring Here's my analysis of a PDF file which contained two differ...

The Technical Aspects of Exploiting IE Zero-Day CVE-2013-3897 Just last month, during our work at spiderlabs research, the team and m...

Cross Framing Google, Facebook and whoever you wish.   Jailbreak Your Device? or buy android? This post is mostly for people who ...