RSSAmplifier

Blog

Blog

Recent content on Blog

cyberroute.github.ioRSS feed ↗6 posts

Latest posts

From Reflected XSS to Container RCE in LocalStack via CloudFormation Deploy UI

CVE Identifiers CVE-2025-65200 - Remote Code Execution via XSS to CloudFormation Chain
CVE-2025-69723 - Reflected Cross-Site Scripting (XSS) Vulnerability
What is LocalStack and how to quickly start it? LocalStack is a popular open-source platform that emulates AWS services locally, allowing developers to build and test cloud infrastructure without touching real AWS accounts.
Because…

Exploiting CORS vulnerability with basic origin reflection

Exploiting CORS Misconfigurations Introduction During a recent security assessment, I discovered a CORS (Cross-Origin Resource Sharing) misconfiguration that allowed complete bypass of the Same-Origin Policy. This vulnerability enabled an attacker to steal sensitive user information including API keys, email addresses, and session tokens from authenticated users.
In this guide, I’ll walk…

Presenting Bruter: a Web Server Testing Tool

Introduction Bruter is a lightweight application built as an experimental project while learning the Go programming language. Though inspired by the popular Xray tool from GitHub, Bruter introduces its own set of features, tailored specifically for web server testing and configuration validation. Whether you’re a seasoned web administrator or a beginner in cybersecurity, Bruter offers a…

Presenting Scanme: Deep Dive into Network Scanning with Golang: Building a Port Scanner

Introduction: In today’s interconnected world, understanding network security is essential. One essential tool in a security professional’s arsenal is a port scanner. You probably thinking what? are you reinventing the wheel? Well not exactly I am building a deeper understanding of what happens under the hood.
There are plenty of tools out there that you can use for network…

Wannabe Security Researcher!?!?

This is the very first article that I am publishing on this blog, I wanted to share this experience with folks that are passionate like myself about Security at 360 degrees and also share my thought process to actually produce the correct solution. The assignment received has been pretty interesting and at the same time challenging given that I consider myself a wannabe Security Researcher :D.…

About me

Welcome to my blog!!!
Hello, I’m Alessandro, Software Engineer in Security, and passionate musician based in Rome, Italy. With over 15 years of experience in the tech industry, my journey began as a self-taught Linux engineer, only later I got into coding and I liked it a lot…
Driven by a relentless curiosity and a commitment to continuous improvement, I transitioned into…