No results found.
a hands-on bug bounty training guide for keycloak identity and access management. covers protocol foundations, fingerprinting, auth flow exploitation, token attacks, SSRF, account takeover chains, and more.
10 hands-on labs walking through every layer of DHCP in OVN — from the NB database schema all the way to raw packet construction in ovn-controller's pinctrl. Every concept from the writeup, exercised with hands-on verification.
I traced the full lifecycle of DHCP in OVN — from the moment you attach DHCP options to a logical port, through northd scanning, logical flow generation, action encoding, ovn-controller packet-in handling, all the way to the raw DHCP packet being constructed and injected back into the datapath. Here's everything I found along the way.
How I chained a bleach bypass, client-side path traversal, and an open redirect to steal cookies through an outerHTML sink.
14 hands-on labs covering every aspect of OVN ACL processing: direction mapping, allow-related conntrack, drop ACLs with BLOCK hints, stateless ACLs, tiered evaluation, universal flows, port groups, reject actions, logging, and more.
