$ whoami
Alessandro Bresciani aka CyberRoute
security research · tooling
Software engineer in security based in Rome. Write-ups on vulnerabilities I find, CVEs I disclose, and the tools I build along the way.
## disclosures all →
## latest
-
From Reflected XSS to Container RCE in LocalStack via CloudFormation Deploy UI
A reflected XSS in LocalStack's CloudFormation deploy UI, chained into code execution inside the container.
-
Exploiting CORS vulnerability with basic origin reflection
A CORS misconfiguration with basic origin reflection that let an attacker steal API keys, emails and session tokens.
-
Presenting Bruter: a Web Server Testing Tool
A lightweight Go tool for web server testing and configuration validation.
-
Presenting Scanme: Deep Dive into Network Scanning with Golang: Building a Port Scanner
Building a port scanner in Go to understand what happens under the hood of network scanning.
-
Wannabe Security Researcher!?!?
A passive RDP data extractor: pulling banners, TLS and NTLM details from a service without getting blocked.