RiSec Cybersecurity Research
Dedicated to advancing digital security through cutting-edge research, responsible disclosure, and community education.
Hello, I'm Steven Black (@n0tst3), a security analyst, researcher, and penetration tester with a passion for uncovering vulnerabilities and making the digital world safer. My work focuses on web application security and responsible disclosure.
I've had the privilege of collaborating with teams on open-source projects and contributing to the security community. My expertise includes bug hunting, network protocol analysis, and reverse engineering. I'm always eager to explore new challenges and contribute to a more resilient technology landscape.
This platform serves as a hub for some of my advisories, research, and technical blog posts. I hope it becomes a valuable resource for fellow security professionals, developers, and anyone interested in the art and science of cybersecurity =].
An access control issue in WebBoss.io CMS before v3.7.0.1 allows attackers to > access the Website Backup Tool via a crafted GET request. > commence a back up request > download the backup
Read More →Identified a flaw in the password reset function of ABC CMS, allowing unauthenticated users to gain access.
Read Full Advisory →Found a stored XSS vulnerability in the web interface of a popular smart home hub.
Read Full Advisory →A technical guide on how to set up and use fuzzing tools to find vulnerabilities in software and web applications.
Read More →An in-depth look at the security model of WebAssembly and potential attack vectors for browser-based applications.
Read More →A practical guide for developers and security teams on how to mitigate risks in the software supply chain.
Read More →Whether you have a question about my research, a potential collaboration, or a security vulnerability to report, feel free to reach out.