Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #22105

Y

Yokai Research by Hakai Offensive Security

Company blog · labs.hakaioffsec.comsecurity

Yokai Research by Hakai Offensive Security is the company blog at labs.hakaioffsec.com, writing about security. Since 2023, 3 different Hacker News readers have linked it 3 times, most often “Leaking Bitwarden's Vault with a Nginx vulnerability”. It is still writing: the last post was on 2026-10-27, and you can follow it by feed.

Visit the blog
3mentions?
3HN people?
2023–2023first – last linked?

Too few sampled comments (1) to say how often HN recommends it.?

Why HN links it

Cited in an HN thread on Gixy, an Nginx config analyzer, as a possible source for its checks. The linked post covers Nginx alias path traversal, a configuration security issue.

Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Research beyond the obvious

Most-linked posts?

  1. Leaking Bitwarden's Vault with a Nginx vulnerability
    2 people · 2 mentions · first linked 2023-07-03

What Hacker News says?

  1. Did you find that after reading https://labs.hakaioffsec.com/nginx-alias-traversal/ by any chance? Semgrep has a nginx ruleset too https://semgrep.dev/p/nginx

    Comment linking /nginx-alias-traversal/

    on “Gixy: Nginx Configuration Static Analyzer”
  2. Submitted Leaking Bitwarden's Vault with a Nginx vulnerability as a story · 20 points

    HN discussion
  3. Submitted Coffee: A COFF loader made in Rust as a story · 2 points

    HN discussion

Search all of HN for labs.hakaioffsec.com