AppSec Engineering

Security architecture, authorization patterns, and engineering practices that make products harder to break.

How was Uber hacked, and what can we learn from the incident?

A technical breakdown of the 2022 Uber breach: how dark web credentials, MFA fatigue attacks, and lateral movement through internal tooling led to full corporate access.

Hacking apps using NoSQL Injection

Hacking apps using NoSQL Injection

Microservices Authorization using Open Policy Agent and Traefik (API Gateway)

Microservices Authorization using Open Policy Agent and Traefik (API Gateway)