Antony Garand

I recently stumbled upon a Youtube video by No Text To Speech regarding Guilded issues that reminded...

You might have heard about tixy.land, the minimalist javascript playground for creative coding....

I find metaballs fascinating: Pure shapes fusing and morphing with each other, making a weird gooey r...

Cover gif by Freya Holmér I feel like animations are the most intuitive way to visualize and und...

An odd behavior from JavaScript typed arrays

This is my second post regarding multiple XSS I found on dev.to

Story of a reflected XSS in Ghost, the publishing platform. This post covers the technical walkthrough of the vulnerability.

The curious case of JSON hijacking

Learn to navigate Dev.to's source code by understanding what happens when performing common actions!

How I found a vulnerability in the application, and how you can too!

How I managed to compromise accounts from an information leak on a web application.

Here is a vulnerable application which can be exploited thanks to a rather unknown SQL quirk.

Can you find out how malware is injected in this page?

Returntrue.win is a website containing many challenges where you supply the input of a function which needs to return true. This posts covers the solutions to these challenges.

WriteUP for the GoogleCTF 2018 challenge Translate

Returntrue.win is a website containing many challenges where you supply the input of a function which needs to return true. This posts covers the solutions to these challenges.

JavaScript can produce interesting behavior thanks to its dynamic nature and rich features!

Async math can cause bugs

JavaScript hoisting is fun, but we need to be aware of its working to prevent vulnerable code.

Guide on how to deploy a NestJS application on AWS Beanstalk, or other production environment.