PUBLIC SECURITY RESEARCH
Disclosures, primary references, and tools for understanding how systems break.
The services did not consistently check caller permissions, verify the authority of worker results or restrict storage operations. The researcher questioned whether a narrowly named field actually limited…
Read the caseThe controlled demonstration executed a newer, unreviewed revision. Access to secrets or cloud resources was a potential consequence of the build’s…
The researcher reports that a user visiting a malicious website could unintentionally grant an application access to read or modify private GitHub data.…
GitHub confirms production-container credential exposure and assessed with high confidence that the issue had not been previously exploited and impact was…
Potential takeover of third-party application accounts using the integration without additional safeguards. Named third-party applications were not tested…
The researcher observed code execution across multiple service contexts. The disclosed account does not establish a broader compromise beyond those…
Researcher reports a separate, lower-severity account-takeover finding, fixed before publication.
Build foundational command-line literacy in the designated training game. Record what each exercise teaches and the limits of the environment before…
training labStudy how a training application's trust and access boundaries should work. Keep notes about the expected control and defensive principle, without…
training labDuring parser design review, document extent, ownership, and validity duration together. Identify where array-to-pointer conversion discards bounds…
implementation guideSeparate the question of where an artifact came from from whether its source and build process meet release requirements. Compare the expected build…
architecture guide40 reviewed policies · 808 captured scopes · source links & coverage status
| / | Focus search on this page |
| Ctrl K | Search everything (command palette) |
| 1-9 | Library, Generator, Playbooks, Gadgets, Checklists, Payloads, Bypasses, Utilities, Reports |
| 0 | AI / MCP connector |
| j / k | Move selection down / up |
| Enter | Expand / open selected |
| c | Copy primary command of selected |
| f | Toggle favorite on selected tool |
| Esc | Clear search / close |