Techniques, methodology notes and write ups of vulnerability classes we keep finding, published with client permission and identifying detail removed.
At XECbuild, we prioritize precision over noise. Read how targeted reconnaissance led to the discovery of a critical Brand Impersonation vulnerability within NASA's infrastructure, earning an official Letter of Recognition.
A technical case study by XECbuild highlighting the critical dangers of relying solely on frontend authentication, leading to a high-severity employee PII exposure via an unprotected backend API.
A technical case study by XECbuild detailing how hardcoded JavaScript secrets and public-facing infrastructure led to the critical exposure of a production Grafana Loki instance, leaking PII and active administrator session tokens.
A technical case study by XECbuild highlighting how improper client-side trust and HTTP response manipulation led to a complete authentication bypass within a major enterprise portal.
A technical case study by XECbuild detailing how a Broken Function Level Authorization (BFLA) flaw in a major fintech platform allowed lower-privileged sub-users to extract sensitive operational tokens from administrative accounts.
A technical case study by XECbuild detailing how a misconfigured third-party asset embedded within an e-commerce platform's product specifications created a critical supply chain and malware distribution risk.
A technical case study by XECbuild detailing how a persistent HTML injection vulnerability within a government chatbot integration exposed critical infrastructure to UI redressing and credential harvesting.
A technical case study by XECbuild detailing how a missing server-side authorization check (BOLA/IDOR) on a major travel platform exposed massive amounts of sensitive Personally Identifiable Information (PII).
A technical case study by XECbuild detailing how manual testing uncovered a critical Web Cache Poisoning vulnerability, bypassing edge WAF defenses via cache entanglement to achieve zero-click content spoofing.
