Research
Lab research by Excession Labs on deliberately vulnerable applications, with the requests, evidence and code to reproduce every result.
We publish two kinds of evidence, and we label each one.
Lab research tests deliberately vulnerable open-source applications in our own lab. Anyone can rerun it: each study lists the application version, the test setup, the requests and responses, and what we got wrong as well as what we found.
Case studies come from authorized tests of real systems. We publish one only with the system owner's written permission, with identifying details removed.
The first lab study is in progress. It will be listed here with its data and code.
Need a pentest you can act on?
Tell us what you need tested and why. We reply to agree scope, and testing starts only after written authorization.