https://afine.com/pl https://afine.com https://afine.com/pl/research https://afine.com/research https://afine.com/pl/about-afine https://afine.com/about-afine https://afine.com/pl/format-string-vulnerability-apple-tcc-daemon https://afine.com/format-string-vulnerability-apple-tcc-daemon https://afine.com/pl/blog https://afine.com/blog https://afine.com/pl/contact https://afine.com/contact https://afine.com/pl/penetration-testing https://afine.com/penetration-testing https://afine.com/pl/red-teaming https://afine.com/red-teaming https://afine.com/pl/privacy-policy-cookies https://afine.com/privacy-policy-cookies https://afine.com/pl/desktop-application-testing https://afine.com/desktop-application-testing https://afine.com/pl/how-macos-file-metadata-exposed-authentication-tokens https://afine.com/how-macos-file-metadata-exposed-authentication-tokens https://afine.com/pl/threats-of-unvalidated-xpc-clients-on-macos https://afine.com/threats-of-unvalidated-xpc-clients-on-macos https://afine.com/pl/breaking-hardened-runtime-the-0-day-microsoft-delivered-to-macos https://afine.com/breaking-hardened-runtime-the-0-day-microsoft-delivered-to-macos https://afine.com/pl/how-to-perform-thick-client-penetration-testing https://afine.com/how-to-perform-thick-client-penetration-testing https://afine.com/pl/desktop-application-security-testing-checklist https://afine.com/desktop-application-security-testing-checklist https://afine.com/pl/desktop-application-security-standard-introducing-dasvs https://afine.com/desktop-application-security-standard-introducing-dasvs https://afine.com/pl/to-allow-or-not-to-get-task-allow-that-is-the-question https://afine.com/to-allow-or-not-to-get-task-allow-that-is-the-question https://afine.com/pl/java-rmi-for-pentesters-part-two-reconnaissance-attack-against-non-jmx-registries https://afine.com/java-rmi-for-pentesters-part-two-reconnaissance-attack-against-non-jmx-registries https://afine.com/pl/tcc-bypass-in-microsoft-visual-studio-code-via-misconfigured-node-fuses https://afine.com/tcc-bypass-in-microsoft-visual-studio-code-via-misconfigured-node-fuses https://afine.com/pl/insecure-credential-storage-in-check-point-smartconsole-aka-cve-2024-24915 https://afine.com/insecure-credential-storage-in-check-point-smartconsole-aka-cve-2024-24915 https://afine.com/pl/beyond-the-surface-digging-into-cve-2024-10864-cve-2024-10865-in-netiq-advanced-authentication https://afine.com/beyond-the-surface-digging-into-cve-2024-10864-cve-2024-10865-in-netiq-advanced-authentication https://afine.com/pl/history-of-null-pointer-dereferences-on-macos https://afine.com/history-of-null-pointer-dereferences-on-macos https://afine.com/pl/understanding-and-mitigating-toctou-vulnerabilities-in-c-applications https://afine.com/understanding-and-mitigating-toctou-vulnerabilities-in-c-applications https://afine.com/pl/bypassing-spam-filtering-mechanism-in-outlook https://afine.com/bypassing-spam-filtering-mechanism-in-outlook https://afine.com/pl/case-study-analyzing-macos-ionvmefamily-driver-denial-of-service-issue https://afine.com/case-study-analyzing-macos-ionvmefamily-driver-denial-of-service-issue https://afine.com/pl/slap-flop-apple-silicons-data-speculation-vulnerabilities https://afine.com/slap-flop-apple-silicons-data-speculation-vulnerabilities https://afine.com/pl/task-injection-on-macos https://afine.com/task-injection-on-macos https://afine.com/pl/microsoft-defender-smartscreen-bypass-with-copy-paste-from-iso https://afine.com/microsoft-defender-smartscreen-bypass-with-copy-paste-from-iso https://afine.com/pl/code-execution-red-team https://afine.com/code-execution-red-team https://afine.com/pl/enhancing-user-privacy-and-security-with-android-15-a-quick-jump-into-new-features https://afine.com/enhancing-user-privacy-and-security-with-android-15-a-quick-jump-into-new-features https://afine.com/pl/ibm-i-access-client-solutions-vulnerabilities https://afine.com/ibm-i-access-client-solutions-vulnerabilities https://afine.com/pl/owasp-top-10-for-llm-applications https://afine.com/owasp-top-10-for-llm-applications https://afine.com/pl/red-team-trickery https://afine.com/red-team-trickery https://afine.com/pl/practical-strategies-for-exploiting-file-read-vulnerabilities https://afine.com/practical-strategies-for-exploiting-file-read-vulnerabilities https://afine.com/pl/testing-and-exploiting-java-deserialization-in-2021 https://afine.com/testing-and-exploiting-java-deserialization-in-2021 https://afine.com/pl/java-rmi-for-pentesters-structure-recon-and-communication-non-jmx-registries https://afine.com/java-rmi-for-pentesters-structure-recon-and-communication-non-jmx-registries https://afine.com/pl/a-mouse-move-that-crashed-the-system-stack-buffer-overflow-in-display-driver-on-macos https://afine.com/a-mouse-move-that-crashed-the-system-stack-buffer-overflow-in-display-driver-on-macos https://afine.com/pl/dll-hijacking-in-check-point-smartconsole-installer-aka-cve-2024-24916 https://afine.com/dll-hijacking-in-check-point-smartconsole-installer-aka-cve-2024-24916 https://afine.com/pl/graphql-security-from-a-pentesters-perspective https://afine.com/graphql-security-from-a-pentesters-perspective https://afine.com/pl/llm-security-prompt-injection-camel https://afine.com/llm-security-prompt-injection-camel https://afine.com/pl/when-memory-refuses-to-forget-sensitive-data-persistence-in-desktop-application https://afine.com/when-memory-refuses-to-forget-sensitive-data-persistence-in-desktop-application https://afine.com/pl/null-pointer-exceptions-from-javas-pitfalls-to-kotlins-solutions https://afine.com/null-pointer-exceptions-from-javas-pitfalls-to-kotlins-solutions https://afine.com/pl/unmasking-the-security-labyrinth-navigating-the-perils-of-sap-guixt-scripting https://afine.com/unmasking-the-security-labyrinth-navigating-the-perils-of-sap-guixt-scripting https://afine.com/pl/ready-wasnt-ready-four-critical-vulnerabilities-in-symfonia-edokumenty https://afine.com/ready-wasnt-ready-four-critical-vulnerabilities-in-symfonia-edokumenty https://afine.com/pl/threat-of-tcc-bypasses-on-macos https://afine.com/threat-of-tcc-bypasses-on-macos https://afine.com/pl/sql-injection-in-the-age-of-orm-risks-mitigations-and-best-practices https://afine.com/sql-injection-in-the-age-of-orm-risks-mitigations-and-best-practices https://afine.com/pl/case-study-iomobileframebuffer-null-pointer-dereference https://afine.com/case-study-iomobileframebuffer-null-pointer-dereference https://afine.com/pl/voip-penetration-tests https://afine.com/voip-penetration-tests https://afine.com/pl/invoker-automating-pentesting-tools-in-burp-suite-example-with-dosfiner https://afine.com/invoker-automating-pentesting-tools-in-burp-suite-example-with-dosfiner https://afine.com/pl/sap-gui-scripting-python-windows-api-security-testing https://afine.com/sap-gui-scripting-python-windows-api-security-testing https://afine.com/pl/prompt-injection-mitigation-7-defense-strategies-for-llms https://afine.com/prompt-injection-mitigation-7-defense-strategies-for-llms https://afine.com/pl/jtag-flipper-zero-to-repair-the-proxmark3 https://afine.com/jtag-flipper-zero-to-repair-the-proxmark3 https://afine.com/pl/forty-years-of-hacking-phrack-cfp https://afine.com/forty-years-of-hacking-phrack-cfp https://afine.com/pl/newsletter https://afine.com/newsletter https://afine.com/pl/tlpt-checklist-download https://afine.com/tlpt-checklist-download https://afine.com/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectors https://afine.com/pl/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectors https://afine.com/pl/blogs/automatyzacja-testow-sap-z-uzyciem-windows-api-w-pythonie https://afine.com/blogs/sap-test-automation-using-windows-api-in-python https://afine.com/pl/blogs/bezpieczenstwo-baz-danych-sql-injection-w-erze-orm-ow https://afine.com/pl/blogs/bezpieczenstwo-graphql-praktyczny-przewodnik-pentestera https://afine.com/pl/blogs/bezpieczenstwo-voip-testy-penetracyjne-i-najczestsze-zagrozenia https://afine.com/blogs/broken-access-control-in-the-real-world-chaining-two-bugs-to-extract-mdm-service-passwords https://afine.com/pl/blogs/broken-access-control-in-the-real-world-chaining-two-bugs-to-extract-mdm-service-passwords https://afine.com/pl/blogs/burp-suite-extensions-automatyzacja-testow-penetracyjnych-z-invoker-i-dosfiner https://afine.com/blogs/caido-vs-burp-suite-a-penetration-testers-comparison https://afine.com/pl/blogs/caido-vs-burp-suite-porownanie-narzedzi-do-pentestow https://afine.com/pl/blogs/checklista-tlpt-dora-261-krokow-do-zgodnosci https://afine.com/blogs/the-dora-compliance-checklist-that-goes-261-steps-deep https://afine.com/blogs/content-spoofing-ssrf-f5-big-ip-security-assessment https://afine.com/pl/blogs/content-spoofing-ssrf-f5-big-ip-security-assessment https://afine.com/pl/blogs/czterdziesci-lat-hackingu-phrack-cfp https://afine.com/pl/blogs/dasvs-standard-bezpieczenstwa-aplikacji-desktopowych https://afine.com/pl/blogs/demaskowanie-labiryntu-bezpieczenstwa-zagrozenia-zwiazane-ze-skryptami-sap-guixt https://afine.com/pl/blogs/desktop-application-security-testing-checklist https://afine.com/pl/blogs/dll-hijacking-w-check-point-smartconsole-cve-2024-24916 https://afine.com/pl/blogs/dyrektywa-nis2-testy-penetracyjne https://afine.com/blogs/nis2-penetration-testing https://afine.com/blogs/firmware-hacking-from-router-firmware-to-buffer-overflow-on-mips https://afine.com/pl/blogs/firmware-hacking-from-router-firmware-to-buffer-overflow-on-mips https://afine.com/blogs/how-to-choose-a-penetration-testing-company-the-2026-buyers-checklist https://afine.com/pl/blogs/how-to-choose-a-penetration-testing-company-the-2026-buyers-checklist https://afine.com/blogs/hunting-glassworm-open-source-detection-for-invisible-supply-chain-payloads https://afine.com/pl/blogs/hunting-glassworm-open-source-detection-for-invisible-supply-chain-payloads https://afine.com/pl/blogs/inzynieria-wsteczna-serwisu-tcc-apple-kiedy-zdekompilowany-kod-klamie https://afine.com/pl/blogs/jak-metadane-plikow-w-systemie-macos-ujawnialy-tokeny-uwierzytelniania https://afine.com/pl/blogs/java-deserialization-testowanie-i-exploitacja-w-javie https://afine.com/pl/blogs/java-rmi-dla-pentesterow-czesc-druga-rozpoznanie-i-atakowanie-non-jmx-registries https://afine.com/pl/blogs/java-rmi-dla-testerow-penetracyjnych-struktura-rozpoznanie-i-komunikacja-non-jmx-registries https://afine.com/pl/blogs/jtag-i-flipper-zero-naprawa-proxmark3 https://afine.com/blogs/kiosk-breakout-from-pin-bypass-to-nt-authority-system https://afine.com/pl/blogs/kiosk-breakout-from-pin-bypass-to-nt-authority-system https://afine.com/blogs/kiosk-security-why-self-service-terminals-are-the-weakest-link-in-your-network https://afine.com/pl/blogs/kiosk-security-why-self-service-terminals-are-the-weakest-link-in-your-network https://afine.com/pl/blogs/memory-wiping-jak-bezpiecznie-czyscic-pamiec-w-aplikacjach https://afine.com/pl/blogs/niebezpieczne-przechowywanie-poswiadczen-w-check-point-smartconsole-czyli-cve-2024-24915 https://afine.com/pl/blogs/null-dereference-w-macos-historia-i-nowoczesne-mitygacje https://afine.com/pl/blogs/null-pointer-dereference-w-macos-studium-przypadku-iomobileframebuffer https://afine.com/pl/blogs/nullpointerexception-jak-uniknac-npe-w-java-i-kotlin https://afine.com/pl/blogs/obejscie-hardened-runtime-0-day-od-microsoftu-w-macos https://afine.com/pl/blogs/obejscie-microsoft-defender-smartscreen-z-uzyciem-przenoszenia-z-plikow-iso https://afine.com/pl/blogs/omijanie-filtrowania-spamu-w-outlooku-poprzez-url-obfuscation https://afine.com/pl/blogs/owasp-top-10-for-llm-applications https://afine.com/blogs/pickle-deserialization-in-ml-pipelines-the-rce-that-wont-go-away https://afine.com/pl/blogs/pickle-deserialization-in-ml-pipelines-the-rce-that-wont-go-away https://afine.com/pl/blogs/pod-powierzchnia-analiza-cve-2024-10864-i-cve-2024-10865-w-netiq-advanced-authentication https://afine.com/pl/blogs/podatnosci-w-ibm-i-access-client-solutions https://afine.com/pl/blogs/pozwolic-czy-nie-pozwolic-na-get-task-allow-oto-jest-pytanie https://afine.com/pl/blogs/praktyczne-strategie-wykorzystania-luk-w-nieautoryzowanym-odczycie-plikow https://afine.com/pl/blogs/prompt-injection-i-camel-obrona-przed-atakami-ai https://afine.com/pl/blogs/prompt-injection-w-aplikacjach-llm-przeglad-metod-zabezpieczen https://afine.com/pl/blogs/przeglad-ulepszen-zwiazanych-z-prywatnoscia-i-bezpieczenstwem-w-android-15 https://afine.com/pl/blogs/przepelnienie-bufora-stosu-w-sterowniku-wyswietlania-macos https://afine.com/pl/blogs/red-team-trickery https://afine.com/blogs/response-forger-a-burp-suite-extension-to-modify-responses-on-the-fly https://afine.com/pl/blogs/response-forger-a-burp-suite-extension-to-modify-responses-on-the-fly https://afine.com/pl/blogs/sap-gui-scripting-w-pythonie-automatyzacja-testow-przy-uzyciu-windows-api https://afine.com/pl/blogs/slap-attack-podatnosc-w-apple-silicon-wykorzystujaca-spekulacyjne-wykonanie https://afine.com/blogs/stored-xss-to-rce-finding-cve-2025-4951-in-rapid7-appspider https://afine.com/pl/blogs/stored-xss-to-rce-finding-cve-2025-4951-in-rapid7-appspider https://afine.com/pl/blogs/studium-przypadku-denial-of-service-dos-sterownika-ionvmefamily-w-systemie-macos https://afine.com/pl/blogs/symfonia-edokumenty-rce-sql-injection-i-local-file-inclusion https://afine.com/pl/blogs/task-injection-w-macos https://afine.com/pl/blogs/tcc-bypass-w-microsoft-visual-studio-code-poprzez-nieprawidlowo-skonfigurowane-node-fuses https://afine.com/pl/blogs/techniki-omijania-applocker-i-edr-w-operacjach-red-team https://afine.com/pl/blogs/testowanie-aplikacji-desktopowych https://afine.com/pl/blogs/testy-penetracyjne-aplikacji-desktopowych https://afine.com/pl/blogs/time-of-check-time-of-use-toctou-anatomy-of-a-race-condition-in-gnu-sed https://afine.com/blogs/time-of-check-time-of-use-toctou-anatomy-of-a-race-condition-in-gnu-sed https://afine.com/pl/blogs/tlpt-dora-2026-wymogi-rts-i-6-fazowy-proces-testowania https://afine.com/blogs/tlpt-dora-threat-led-penetration-testing-requirements https://afine.com/pl/blogs/toctou-podatnosci-time-of-check-time-of-use-w-aplikacjach-c https://afine.com/blogs/usb-hid-attack-for-3-dollars-brute-forcing-a-kiosk-pin-with-an-attiny85 https://afine.com/pl/blogs/usb-hid-attack-for-3-dollars-brute-forcing-a-kiosk-pin-with-an-attiny85 https://afine.com/blogs/web-application-penetration-testing-services https://afine.com/pl/blogs/web-application-penetration-testing-services https://afine.com/pl/blogs/zagrozenia-wynikajace-z-nieuwierzytelnionych-klientow-xpc-na-macos https://afine.com/pl/blogs/zagrozenie-zwiazane-z-obchodzeniem-tcc-w-systemie-macos https://afine.com/industries/banking-security-services https://afine.com/pl/industries/bankowosc https://afine.com/industries/financial-security-services https://afine.com/pl/industries/fintech https://afine.com/industries/hipaa-compliance-services https://afine.com/pl/industries/sektor-medyczny https://afine.com/industries/industrial-security-services https://afine.com/pl/industries/infrastruktura-krytyczna https://afine.com/services/bank-penetration-testing https://afine.com/pl/services/testy-bezpieczenstwa-dla-bankow https://afine.com/services/critical-infrastructure-penetration-testing https://afine.com/pl/services/pentesty-dla-infrastruktury-krytycznej https://afine.com/pl/services/cwiczenia-red-team-dla-sektora-medycznego https://afine.com/services/red-team-engagement-for-healthcare-organizations https://afine.com/services/penetration-testing-for-fintech https://afine.com/pl/services/testy-penetracyjne-dla-fintech https://afine.com/services/penetration-testing-for-healthcare https://afine.com/pl/services/testy-penetracyjne-dla-sektora-medycznego https://afine.com/services/red-team-assessment-for-banks https://afine.com/pl/services/red-team-assessment-for-banks https://afine.com/pl/services/red-team-dla-fintech https://afine.com/services/red-team-security-testing-for-fintech https://afine.com/pl/services/red-team-dla-infrastruktury-krytycznej https://afine.com/services/red-team-exercise-for-critical-infrastructure https://afine.com/services/tlpt-dora https://afine.com/pl/services/tlpt-dora