#cspt2csrf

Nice to see @maxenceschmitt.bsky.social's CSPT research
(a nominee for #Portswigger's top 10 web hacking techniques for 2024) getting a shout out on the Critical Thinking Bug Bounty podcast !

Check out the review and comments here: youtu.be/3rkg1CUDpjA?...

#doyensec #appsec #security #CSPT2CSRF

Taking his previous research to the next level, our Maxence Schmitt explores how to bypass various upload restrictions to exploit client-side path traversal. Read about it in our latest blog post today!

blog.doyensec.com/2025/01/09/c...

#doyensec #appsec #cspt #cspt2csrf