LLM-Augmented Fuzzing for Web Application Endpoints
LLMs help fuzzers break past input validation by supplying valid requests and ordered sequences.
Deja Okonkwo
Breach Authority
Jailbreak and Root Detection Bypass Techniques
Server-side checks and layered defenses matter more than perfect detection in rooted environments.
Marcus Yuen-Castillo
Deep Link and Intent Hijacking in Android Applications
Attackers can chain deep-link flaws to hijack accounts and reach private app components.
Priya Nambiar
WebView Security Vulnerabilities in Hybrid Mobile Apps
Injected JavaScript in hybrid apps can reach native device features through the WebView bridge.
Soren Halvardsen
Android Runtime Manipulation With Frida
Dynamic instrumentation reveals runtime weaknesses static analysis cannot detect.
Priya Nambiar
Dependency and Supply Chain Recon for SaaS Targets
Attackers exploit supply chain trust relationships that perimeter tests cannot detect.
Marcus Yuen-Castillo
OSINT Techniques for SaaS Engineering Team Targeting
Defenders can walk the same reconnaissance chain attackers use before active testing begins.
Deja Okonkwo
Subdomain Enumeration Techniques for SaaS Attack Surfaces
Discover forgotten subdomains before attackers find them.
Deja Okonkwo
Persistence Mechanisms in Compromised Cloud Environments
Attackers hide in legitimate cloud access, not just malware.
Marcus Yuen-Castillo
Communicating Vulnerability Severity to Engineering and Executive Stakeholders
Different audiences need different facts from the same vulnerability data to act.
Soren Halvardsen
Fingerprinting Third-Party SaaS Integrations as Attack Vectors
Unmanaged OAuth tokens and dormant integrations have become attackers' preferred entry point.
Marcus Yuen-Castillo
API Endpoint Discovery Through JavaScript Bundle Analysis
Pentester's guide to extracting API routes from frontend code before authentication begins.
Deja Okonkwo