Aethlios

Aethlios is the professional and research-focused brand of a developer, teacher, and bug hunter whose work centers on web application security. The site brings together technical articles, conference talks, workshops, demonstrations, and source code, sharing practical findings with both French- and English-speaking audiences. A recurring focus is the security risks of time-based secrets and the “Sandwich Attack,” including research into exploitation methods and real-time monitoring of application invitations.

Aethlios has presented this work at events including Jeanne d’Hack, LeHack, C-DAY, Unlock your brain, and JSecIn. The published research also covers MongoDB Object IDs, mass-assignment flaws that can enable privileged account creation, and stored cross-site scripting caused by misuse of MarkupSafe. Alongside educational material and security analysis, Aethlios offers the Reset Tolkien tool, associated with research into insecure time-based secrets.

Overall, the brand provides a useful resource for developers and security practitioners seeking detailed vulnerability analysis, practical demonstrations, and knowledge-sharing on web application security