IntruderLabs
ENPT
Team collaborating on security research with data dashboards and technical intelligence

// research

Research is what drives us.

Our knowledge comes from researching and building.We actively contribute to the security community, sharing practical knowledge and technical intelligence.

Our focus

  • advisories

    Advisories

    Responsible disclosure of vulnerabilities found in our research.

  • talks

    Talks & training

    Technical content for teams and events, tailored to what each business needs.

  • tools

    Tools

    Utilities and proofs of concept we use in our own offensive assessments.

Publications & tools

TopicTypeDate
JWT / JOSE Attack LabToolMay 2026
SSRF HelperToolMay 2026
Report GeneratorToolMay 2026
Security Headers AnalyzerToolMay 2026
CVSS CalculatorToolMay 2026
Security headers in practice: what each header protects and how to configure itArticleMay 2026
SSTI cheatsheetToolMay 2026
SSRF Bypasses: why each filter-evasion technique worksArticleMay 2026
JWT, JWS, JWE, JWA and JWK: the difference between the JOSE acronymsArticleMar 2026
IDOR and Broken Access Control: how authorization breaks and how to lock it downArticleJan 2026
JWT vulnerabilities: alg none, algorithm confusion and weak secretsArticleDec 2025
SSTI: what Server-Side Template Injection is and how it becomes RCEArticleNov 2025
XSS, the definitive guide: reflected, stored, DOM-based and beyondArticleOct 2025
HTTP Request Smuggling: desyncing front-end and back-endArticleSep 2025
Web Cache Poisoning and Web Cache Deception: poisoning and tricking the cacheArticleAug 2025
Race conditions in web apps: TOCTOU, limit-overrun and single-packetArticleJul 2025
Protecting web forms with CAPTCHA: what it solves and what it does notArticleMay 2025
User enumeration: when the form message reveals who has an accountArticleApr 2025
SSRF: how Server-Side Request Forgery works and how to contain itArticleMar 2025
CSRF: how request forgery works and how to harden your formsArticleFeb 2025
Clickjacking: how click hijacking works and how to defend against itArticleJan 2025
Abstract digital network with orange and blue nodes and connections on a dark background

Didn't find what you were looking for? Send us an email with your topic suggestion and we'll include it in upcoming posts.

Subscribe