Joshua Rogers' Scribbles
Joshua Rogers' Scribbles
Joshua Rogers
Personal blog talking about technology, travel, and life.
Latest Posts
In October, I reported two security issues to Okta’s auth0/nextjs-auth0 project, here and here. The latter bug, an oauth parameter injection, allows for a range of types of abuse, like scoping tokens for unintended services, setting...
From gixy to Gixy-Next gixy is an old static analyzer for nginx configurations, which allows the operator to automatically discover vulnerabilities in statis nginc files. It works by reading the configuration into memory, and performing...