XSRF and Cookie manipulation on google.com

Here I present a XSRF vulnerability that allowed to set arbitrary cookie and tamper with existing ones in google.com

XSS in Google Finance

Here I present a XSS vulnerability I discovered in Google Finance (google.com main domain)

Stored XSS in GMail

Here I present a Stored XSS vulnerability I discovered in GMail

XSS in Yandex - AmCharts component

Here I present a (reported) Flash-based XSS vulnerability I discovered in wordstat.yandex.com, which requires no user interaction.

XSS in Nokia - MediaElements component

Here I present a (reported and fixed) Flash-based XSS vulnerability I discovered in Nokia website

Some useful shell tricks for you

Some shell tricks that will be useful to you!

MyISAM vs InnoDB: which one to use in MySQL?

MyISAM vs InnoDB: which one to use in MySQL?

Where is your phone number in π?

Python script to find which available Google Voice phone numbers appear first in decimal digits of π.

Get the perfect Google Voice number, Grep-style!

How to retrieve all available Google Voice numbers, and get the perfect one for you. Grep-style!

A good tutorial on the Burp suite

A very short review of the book Instant Burp Suite Starter.