<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://blog.doyensec.com/</loc>
    <lastmod>2026-10-27T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/10/27/electrong-oss.html</loc>
    <lastmod>2026-10-27T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/10/13/Sfape.html</loc>
    <lastmod>2026-10-13T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/09/24/chrome-ios-policy-bypass.html</loc>
    <lastmod>2026-09-24T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/09/17/ovs.html</loc>
    <lastmod>2026-09-17T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/09/10/oneplus-session-takeover.html</loc>
    <lastmod>2026-09-10T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/06/17/session-switcher.html</loc>
    <lastmod>2026-06-17T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/05/27/aikido-xbow.html</loc>
    <lastmod>2026-05-27T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/05/25/cloudsectidbits-elbaph-alb.html</loc>
    <lastmod>2026-05-25T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/05/19/cfitsio-weaponized-filenames.html</loc>
    <lastmod>2026-05-19T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/05/05/cloudsectidbits-masso-cognito-sso.html</loc>
    <lastmod>2026-05-05T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/04/20/cfitsio-fuzzing.html</loc>
    <lastmod>2026-04-20T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/03/05/mcp-nightmare.html</loc>
    <lastmod>2026-03-05T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/02/16/electron-safe-updater.html</loc>
    <lastmod>2026-02-16T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/02/03/outline-audit-q32025.html</loc>
    <lastmod>2026-02-03T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2026/01/22/frida-instrumentation.html</loc>
    <lastmod>2026-01-22T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/12/02/inql-v610.html</loc>
    <lastmod>2025-12-02T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/10/08/ksmbd-3.html</loc>
    <lastmod>2025-10-08T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/09/25/yet-another-random-story.html</loc>
    <lastmod>2025-09-25T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/09/02/ksmbd-2.html</loc>
    <lastmod>2025-09-02T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/08/19/trivial-exploit-on-C-random.html</loc>
    <lastmod>2025-08-19T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/05/08/scim-hunting.html</loc>
    <lastmod>2025-05-08T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/03/27/cspt-resources.html</loc>
    <lastmod>2025-03-27T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/03/18/exploitable-gitlab.html</loc>
    <lastmod>2025-03-18T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/02/27/exploitable-sshd.html</loc>
    <lastmod>2025-02-27T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/02/11/exploitable-iot.html</loc>
    <lastmod>2025-02-11T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/01/30/oauth-common-vulnerabilities.html</loc>
    <lastmod>2025-01-30T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/01/09/cspt-file-upload.html</loc>
    <lastmod>2025-01-09T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2025/01/07/ksmbd-1.html</loc>
    <lastmod>2025-01-07T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/12/16/unsafe-unpacking.html</loc>
    <lastmod>2024-12-16T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/12/03/cspt-with-eval-villain.html</loc>
    <lastmod>2024-12-03T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/10/02/class-pollution-ruby.html</loc>
    <lastmod>2024-10-02T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/09/19/phishing-case-study.html</loc>
    <lastmod>2024-09-19T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/07/18/custom-actions.html</loc>
    <lastmod>2024-07-18T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/07/11/database-race-conditions.html</loc>
    <lastmod>2024-07-11T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/07/02/cspt2csrf.html</loc>
    <lastmod>2024-07-02T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/06/20/compromised-idp.html</loc>
    <lastmod>2024-06-20T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/05/02/products-security-audit-vs-bugbounty.html</loc>
    <lastmod>2024-05-02T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/03/22/summer-internship-2023.html</loc>
    <lastmod>2024-03-22T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/03/14/supplychain.html</loc>
    <lastmod>2024-03-14T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/02/17/server-side-prototype-pollution-Gadgets-scanner.html</loc>
    <lastmod>2024-02-17T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/01/30/poiex-release.html</loc>
    <lastmod>2024-01-30T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2024/01/23/k8s-scheduling-secure-design.html</loc>
    <lastmod>2024-01-23T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/11/03/Office-Document-Poisoning.html</loc>
    <lastmod>2023-11-03T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/09/25/clientside-javascript-instrumentation.html</loc>
    <lastmod>2023-09-25T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/08/31/introducing-session-hijacking-visual-exploitation.html</loc>
    <lastmod>2023-08-31T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/08/17/inql-v5.html</loc>
    <lastmod>2023-08-17T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/07/26/huawei-theme-arbitrary-code-exec.html</loc>
    <lastmod>2023-07-26T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/07/18/streamlining-websocket-pentesting-with-wsrepl.html</loc>
    <lastmod>2023-07-18T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/06/13/messing-around-with-aws-batch-for-privilege-escalations.html</loc>
    <lastmod>2023-06-13T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/06/06/logistics.html</loc>
    <lastmod>2023-06-06T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/06/01/r2pickledec.html</loc>
    <lastmod>2023-06-01T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/05/04/testing-ztp-platforms-a-primer.html</loc>
    <lastmod>2023-05-04T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/03/28/wallet-info.html</loc>
    <lastmod>2023-03-28T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/03/21/windows-installer.html</loc>
    <lastmod>2023-03-21T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/03/16/ssrf-remediation-bypass.html</loc>
    <lastmod>2023-03-16T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/02/28/new-vector-for-dirty-arbitrary-file-write-2-rce.html</loc>
    <lastmod>2023-02-28T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/02/14/pesd-extension-public-release.html</loc>
    <lastmod>2023-02-14T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/01/24/tampering-unrestricted-user-attributes-aws-cognito.html</loc>
    <lastmod>2023-01-24T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2023/01/10/imagemagick-security-policy-evaluator.html</loc>
    <lastmod>2023-01-10T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/12/13/safeurl.html</loc>
    <lastmod>2022-12-13T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/11/15/learning-ajp.html</loc>
    <lastmod>2022-11-15T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/11/09/recruiting-security-researchers.html</loc>
    <lastmod>2022-11-09T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/10/27/jupytervscode.html</loc>
    <lastmod>2022-10-27T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/10/18/cloudsectidbit-dataimport.html</loc>
    <lastmod>2022-10-18T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/10/11/ebpf-bypass-security-monitoring.html</loc>
    <lastmod>2022-10-11T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/10/06/semgrep-codeql.html</loc>
    <lastmod>2022-10-06T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/09/27/electron-api-default-permissions.html</loc>
    <lastmod>2022-09-27T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/09/06/electrong-launch.html</loc>
    <lastmod>2022-09-06T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/08/24/intern-experience.html</loc>
    <lastmod>2022-08-24T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/07/21/dependency-confusion.html</loc>
    <lastmod>2022-07-21T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/06/09/apache-pinot-sqli-rce.html</loc>
    <lastmod>2022-06-09T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/04/26/vbox-fuzzing.html</loc>
    <lastmod>2022-04-26T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2022/02/16/h1jack-the-game.html</loc>
    <lastmod>2022-02-16T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2021/05/20/graphql-csrf.html</loc>
    <lastmod>2021-05-20T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2021/03/11/regexploit.html</loc>
    <lastmod>2021-03-11T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2021/02/16/electron-apis-misuse.html</loc>
    <lastmod>2021-02-16T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/12/17/psychology-of-remote-work.html</loc>
    <lastmod>2020-12-17T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/12/10/novel-abuses-wifi-direct-mobile-file-transfers.html</loc>
    <lastmod>2020-12-10T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/11/19/inql-scanner-v3.html</loc>
    <lastmod>2020-11-19T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/09/09/fuzzilli-jerryscript.html</loc>
    <lastmod>2020-09-09T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/08/20/playframework-csrf-bypass.html</loc>
    <lastmod>2020-08-20T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/06/11/inql-scanner-v2.html</loc>
    <lastmod>2020-06-11T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/05/14/asn1fuzz.html</loc>
    <lastmod>2020-05-14T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/04/30/polymorphic-images-for-xss.html</loc>
    <lastmod>2020-04-30T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/04/08/libressl-fuzzer.html</loc>
    <lastmod>2020-04-08T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/03/26/graphql-scanner.html</loc>
    <lastmod>2020-03-26T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/03/16/vscode_codeexec.html</loc>
    <lastmod>2020-03-16T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/03/02/gravitational-audit.html</loc>
    <lastmod>2020-03-02T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/02/24/electron-updater-update-signature-bypass.html</loc>
    <lastmod>2020-02-24T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/02/19/solokeys-audit.html</loc>
    <lastmod>2020-02-19T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2020/02/03/heap-exploit.html</loc>
    <lastmod>2020-02-03T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2019/11/05/internship-at-doyensec.html</loc>
    <lastmod>2019-11-05T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2019/08/22/modern-password-managers-flag-secure.html</loc>
    <lastmod>2019-08-22T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2019/08/01/common-crypto-bugs.html</loc>
    <lastmod>2019-08-01T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2019/07/22/jackson-gadgets.html</loc>
    <lastmod>2019-07-22T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2019/07/03/electron-security-workshop.html</loc>
    <lastmod>2019-07-03T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2019/06/11/electronegativity-1.3.html</loc>
    <lastmod>2019-06-11T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2019/04/24/rubyzip-bug.html</loc>
    <lastmod>2019-04-24T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2019/04/03/subverting-electron-apps-via-insecure-preload.html</loc>
    <lastmod>2019-04-03T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2019/01/24/electronegativity.html</loc>
    <lastmod>2019-01-24T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2018/11/05/burp-rest-api-v2.html</loc>
    <lastmod>2018-11-05T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2018/07/19/instrumenting-electron-app.html</loc>
    <lastmod>2018-07-19T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2018/05/24/electron-win-protocol-handler-bug-bypass.html</loc>
    <lastmod>2018-05-24T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2018/05/17/graphql-security-overview.html</loc>
    <lastmod>2018-05-17T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2017/11/27/we-are-hiring.html</loc>
    <lastmod>2017-11-27T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2017/11/15/osx-spotlight.html</loc>
    <lastmod>2017-11-15T00:00:00+01:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2017/08/03/electron-framework-security.html</loc>
    <lastmod>2017-08-03T00:00:00+02:00</lastmod>
  </url>
  <url>
    <loc>https://blog.doyensec.com/2017/03/02/training-burp.html</loc>
    <lastmod>2017-03-02T00:00:00+01:00</lastmod>
  </url>
</urlset>
