My second blog in attack surface analysis is out. This time I will talk about "Custom Protocol Handlers" and discuss 10 bugs (none are mine). Custom protocol handlers are a great way to convert a local attack to a remote one.https://parsiya.net/blog/2021-03-17-attack-surface-analysis-part-2-custom-protocol-handlers/ …
and i previously today posted something that minium double attack surface- check it out :) also, maybe mention that its protocol://user:pass@server.tld/ often helpful with @ to fool parsers
