Research
One path, two interpretations: a route-level authorization bypass
A local case study of an authorization bypass caused by route matching and resource lookup using different URL path representations.
Engineering and security
Blog
Research and engineering write-ups from Plentex. Client work appears only with the client's written consent, and anonymized.