Introducing our latest project: the OAuth Labs. A hands-on approach to OAuth 2.0 vulnerabilities

Exploring the world of a possible supply chain attack, resulting in a compromised, malicious Confluence plugin

Explaining the process and tooling behind our way of auditing Atlassian plugins, 53 0Days later.

A Writeup for a Stored XSS we found in Collabora Online - CVE-2024-29182

During a Data Loss Prevention audit, cyllective managed to find a way to copy files off a Windows computer that had USB storage blocked - introducing COMfiltrat0r

Happy new year! 🎉🥳🥂🥳✨ At the end of last year, cyllective helped to organize the hackbar 202212. This post highlights, what this event was about.

A summarized post about security research of WordPress plugins and the explorational audit spree which followed

Join us in the discovery and exploitation of an authenticated remote code execution vulnerability in OctoberCMS

Follow along in the discovery and exploitation of an authenticated remote code execution vulnerability in OctoberCMS

Join the journey into Plone CMS that lead us to discover an authenticated RCE vulnerability

Nuclei, a fast and customisable vulnerability scanner based on simple YAML based DSL

We take this opportunity to present what cyllective is all about

Writeup on the challenge box Craft from HackTheBox

Writeup on the challenge box Help from HackTheBox

The Data-Loss-Prevention and Firewall Test Suite aka egress0r

Weak passwords, unencrypted communication channels and suspicious files. Learn more about how to stay safe online