Mian
Blog
/
Projects
/
Writeups
Filter
web-security
cookies
csrf
service-workers
business-logic
web
DoS
Latest Posts
Breaking SameSite=Strict in chrome
1/28/2026
How we bypassed SameSite=Strict protections using service worker, unintentionally
The Art of Account Lockouts
6/13/2025
A deep dive into account lockout vulnerabilities and creative exploitation techniques.