// archive
Tag: Denial of Service
BUG BOUNTY WRITEUPS
Client-Side DoS on WAF-Protected Sites by Abusing Cookies
// TL;DR A logic bug I found across several sites, including Upwork. Many sites store the referrer in a cookie, and many sit behind a WAF…
BUG BOUNTY WRITEUPS
The Risk Inside Tesla’s Brute-Force Protection: Locking Out Users
// TL;DR Tesla’s login had a brute-force protection that, on its face, is a good thing — too many wrong passwords and the account locks. The…