<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Pankaj Mouriya — Writing</title><link>https://pankajmouriya.com/blog</link><description>Engineering and security writing by Pankaj Mouriya.</description><item><title>Quick Guide on Kubernetes Admission Controllers</title><link>https://pankajmouriya.com/blog/guide-admission-controllers</link><guid isPermaLink="true">https://pankajmouriya.com/blog/guide-admission-controllers</guid><description>A visual guide to Kubernetes admission controllers and where they sit in the API request path.</description><pubDate>Fri, 12 Apr 2024 00:00:00 GMT</pubDate></item><item><title>Guide to Informers, Custom Controller</title><link>https://pankajmouriya.com/blog/informer-controllers</link><guid isPermaLink="true">https://pankajmouriya.com/blog/informer-controllers</guid><description>How Kubernetes informers and custom controllers watch resources and reconcile desired state.</description><pubDate>Fri, 12 Apr 2024 00:00:00 GMT</pubDate></item><item><title>Long-lived JWT - Abuse and Mitigation</title><link>https://pankajmouriya.com/blog/long-lived-jwt</link><guid isPermaLink="true">https://pankajmouriya.com/blog/long-lived-jwt</guid><description>Why long-lived access tokens increase exposure and how expiration, revocation, and rotation change the tradeoffs.</description><pubDate>Sun, 28 Nov 2021 00:00:00 GMT</pubDate></item><item><title>The Blend of Developer Tools into Security Assessments</title><link>https://pankajmouriya.com/blog/devtools</link><guid isPermaLink="true">https://pankajmouriya.com/blog/devtools</guid><description>Using browser developer tools to investigate postMessage, heap snapshots, Lighthouse findings, and network resources during web security assessments.</description><pubDate>Wed, 07 Jul 2021 00:00:00 GMT</pubDate></item><item><title>CSV Formula Injection</title><link>https://pankajmouriya.com/blog/csv-formula-injection</link><guid isPermaLink="true">https://pankajmouriya.com/blog/csv-formula-injection</guid><description>Tracing how spreadsheet formulas can be injected through exported CSV data.</description><pubDate>Sun, 17 Jan 2021 00:00:00 GMT</pubDate></item><item><title>Authorization Checks Made Easy</title><link>https://pankajmouriya.com/blog/auth-checks-made-easy</link><guid isPermaLink="true">https://pankajmouriya.com/blog/auth-checks-made-easy</guid><description>A practical workflow for testing authorization boundaries with browser containers and proxy tools.</description><pubDate>Mon, 11 Jan 2021 00:00:00 GMT</pubDate></item><item><title>Finding Gems in JavaScript using Dumpster Diver</title><link>https://pankajmouriya.com/blog/looking-for-js-gems</link><guid isPermaLink="true">https://pankajmouriya.com/blog/looking-for-js-gems</guid><description>Finding secrets and overlooked details in JavaScript files with Dumpster Diver.</description><pubDate>Sat, 09 May 2020 00:00:00 GMT</pubDate></item></channel></rss>