Dreamlab Technologies: Blog

Starbucks IDOR: How we prevented an information leak of 6 million Starbucks customers

18 March 2020
By Yamila Levalle

I know where you had coffee last summer! In this blogpost we will explain an IDOR vulnerability that we found at Starbucks Singapore's website a few...

Fuzzing ICS Protocols

10 March 2020
By Yamila Levalle

Traditionally, industrial control systems have been isolated networks with controlled states and very consistent traffic. Developers simply needed to...

Abusing docker.sock exposure

06 March 2020
By Sheila A. Berta & Sol Ozzan

You have probably been playing with Docker vulnerabilities and realized that in real productive environments, sometimes containers need to bind...