Web-Security on SteveSechttps://stevesec.net/tags/web-security/Recent content in Web-Security on SteveSecHugoen-usSat, 15 Jun 2024 00:00:00 +0000Advanced Firebase Exploitation: Risks, Attack Techniques, Mitigations, and Detectionhttps://stevesec.net/blog/advanced-firebase-exploitation/Sat, 15 Jun 2024 00:00:00 +0000https://stevesec.net/blog/advanced-firebase-exploitation/Firebase’s flexibility introduces multiple attack surfaces. A deep dive into misconfigured rules, weak authentication flows, privilege escalation, and how to defend against them.