56,966 blogs · [ { "id": "01a08721-71e6-72c9-b213-82f38c4ec50f", "title": "RCE in vscode-arduino Extension", "url": "http://ahmsec.github.io/blog/2025/11/30/rce-in-vscode-arduino-extension/", "published_at": "2025-11-30T14:30:00+00:00" }, { "id": "01a08721-71e6-72c9-b213-82f38d01bdb2", "title": "Risks of Clicking Links", "url": "http://ahmsec.github.io/blog/2020/08/09/risks-of-clicking-links/", "published_at": "2020-08-09T16:21:00+00:00" }, { "id": "01a08721-71e6-72c9-b213-82f38dfc20bd", "title": "CSRF Token Leak in LastPass Website Client", "url": "http://ahmsec.github.io/blog/2019/01/12/csrf-token-leak-in-lastpass-website-client/", "published_at": "2019-01-13T01:00:00+00:00" }, { "id": "01a08721-71e6-72c9-b213-82f38e7fb5cc", "title": "XSS Filter Evasion via Case Change", "url": "http://ahmsec.github.io/blog/2018/11/22/xss-filter-evasion-via-case-change/", "published_at": "2018-11-22T22:32:00+00:00" }, { "id": "01a08721-71e6-72c9-b213-82f38ef8f38d", "title": "CSRF: Double Submit Cookies Insufficient Against MitM", "url": "http://ahmsec.github.io/blog/2016/08/31/csrf-double-submit-cookies-insufficient-against-mitm/", "published_at": "2016-08-31T15:38:05+00:00" }, { "id": "01a08721-71e6-72c9-b213-82f38f28af6f", "title": "The Dangers of JSONP", "url": "http://ahmsec.github.io/blog/2016/07/05/the-dangers-of-jsonp/", "published_at": "2016-07-05T21:34:03+00:00" }, { "id": "01a08721-71e6-72c9-b213-82f38f2a8433", "title": "Custom Headers as CSRF Defense", "url": "http://ahmsec.github.io/blog/2016/07/03/custom-headers-as-csrf-defense/", "published_at": "2016-07-03T23:18:01+00:00" }, { "id": "01a08721-71e6-72c9-b213-82f38fa1c077", "title": "First Post!", "url": "http://ahmsec.github.io/blog/2016/06/24/first-post/", "published_at": "2016-06-24T14:15:45+00:00" } ] posts Claim your blog

Blog · corpus.blog/blogs/ahmsec.github.io/posts