Oauthcli is a terminal toolkit for testing and validating OAuth 2.0, OAuth 2.1, and OpenID Connect servers. It discovers authorization server capabilities, checks RFC conformance, obtains and inspects tokens, and audits installations with single commands, offering both human-readable and JSON output for agent integration.
OWASP cheatsheet covering OAuth 2.0 security best practices, including terminology for clients, authorization servers, resource owners, and resource servers. Describes access tokens, refresh tokens, and Proof of Possession tokens, along with essential security basics like preventing open redirectors and implementing PKCE for CSRF protection.
This technical post explains DNS wildcard records, which match any subdomain via patterns like *.example.com, and presents three detection approaches for identifying them during subdomain enumeration in bug bounty hunting and CTF activities. The post details how wildcards work per RFC specifications, their interaction with load balancers, and practical methods including querying nonexistent subdomains, querying the wildcard directly, and counting returned IP addresses.
Before NTP became standard in 1988, computers used simpler Time (RFC 868) and Daytime (RFC 867) protocols to sync clocks over networks via port 37, transmitting time as a 32-bit number or human-readable text. These protocols were efficient for 1980s bandwidth constraints but lacked precision, timestamping, and faced a Y2K36 overflow problem; NIST still operates these services today with a custom response format.