devansh

I actually wanted to write about this for months now, but it has been difficult, because the space was moving too fast, that it was impossible to catch up on the progress happening, almost unreal.

Table of Contents Intro Lore What is Harden-Runner's Egress Policy?

Table of Contents Intro Lore Why "Find All The Vulnerabilities" does not work Minimal Scaffolding That Actually Helps Case Study: Claude Opus 4.6 and Firefox What Anthropic Actually Did My Own Methodology The Approach Parse Server HonoJS ElysiaJS harden-r…

Table of Contents Intro Lore What is Parse Server?

Table of Contents Intro Lore How BullFrog's Egress Filtering Works The Layer 3/4 Problem Shared Infrastructure is Everywhere Vulnerability Vulnerable Code Proof of Concept Infrastructure Setup The Workflow Real-World Impact Disclosure Timeline References…

Table of Contents What is Better-Hub?

Table of Contents Intro Lore What is BullFrog's enable-sudo?

Table of Contents Intro Lore What is BullFrog?

Table of Contents Intro Lore CVE-2026-25598 Bypass using sendto Bypass using sendmsg Bypass using sendmmsg Closing Thoughts Intro Lore GitHub Actions have become a prime vector for supply chain attacks, with attackers exploiting workflow misconfigurations…

Table of Contents Intro Lore JWT / JWK / JWKS Primer Vulnerabilities [CVE-2026-22817] - JWT middleware "unsafe default" (HS256) Why this becomes an auth bypass Who is affected?