• The Road Towards 365 Bugs in Microsoft Office 365

  • A Tour of Office 365, Azure & SharePoint, through the Eyes of a Bug Hunter

    A Tour of Office 365, Azure & SharePoint, through the Eyes of a Bug Hunter

  • XSS: the force awakens

  • 50 shades of waf

    XSS bypasses of Barracuda & Sucuri

  • Sucuri XSS Bypasses

  • WYSIWYG Editors XSSed

  • On Breaking PHP-Based Cross-Site Scripting Protections In The Wild

  • trusted friend attack:

  • Cross-Site Scripting: My Love