How I hacked my company's SSO provider
I never thought I'd stumble across a previously-undiscovered vulnerability, much less one in security software. I love reading stories about how people find and report bugs, and how the companies react (preferably thankfully!). I also admire the deep analytical skills required to deconstruct exploitable software, because I would give up long before some of these geniuses. But yet, I have my own story! One of those most important qualities of testing software is just being curious and doing thing...
Read more at mattsayar.com