XSS Explained: Stored, Reflected and DOM-Based
Cross-site scripting executes attacker-controlled JavaScript in your users' browsers, inside your origin — which means it inherits every permission your own code has.
Read more
Insights
The TechBiz blog
Research, write-ups, and practical guidance from the team — straight from the field.
Showing posts in Offensive Security — clear filter
Cloud Penetration Testing: What It Is and What Is Allowed
Testing in cloud is not the same as testing a data centre you own. The shared responsibility model changes both what you may test…
Read more
LLM Security: Prompt Injection and the New Attack Surface
When an application cannot reliably separate instructions from data, every piece of content it reads becomes a potential instruction.
Read more
Active Directory Attack Paths: How Domains Fall
Active Directory rarely falls to a single exploit. It falls to a chain of small, individually reasonable configuration decisions made over many years.
Read more
Business Logic Vulnerabilities: The Bugs No Scanner Finds
No malformed input, no injection payload — just a sequence of entirely legitimate requests that produces an outcome your business never intended.
Read more
API Security: The OWASP API Top 10, Explained Practically
APIs now carry most application traffic, and they fail in ways classic web testing misses. The OWASP API Top 10 exists because the risk…
Read more