rue.sec

Application security. Threat modeling, authorization logic bugs, and the class of vulnerabilities static analysis structurally cannot find. I write detection rules and then try to bypass them.