<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
  <url><loc>https://larp-security.com/</loc><lastmod>2026-11-10</lastmod></url>
  <url><loc>https://larp-security.com/research/</loc><lastmod>2026-11-10</lastmod></url>
  <url><loc>https://larp-security.com/advisories/</loc><lastmod>2026-11-06</lastmod></url>
  <url><loc>https://larp-security.com/team/</loc></url>
  <url><loc>https://larp-security.com/research/coding-agent-indirect-prompt-injection-sessionstart-hook-shell-command/</loc><lastmod>2026-11-10</lastmod><image:image><image:loc>https://larp-security.com/og/coding-agent-indirect-prompt-injection-sessionstart-hook-shell-command.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/firmware-parser-length-underflow-stack-overwrite-saved-return-address/</loc><lastmod>2026-11-09</lastmod><image:image><image:loc>https://larp-security.com/og/firmware-parser-length-underflow-stack-overwrite-saved-return-address.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/dfir-ctf-challenge-design-dns-tunneling-key-exfiltration-timeline/</loc><lastmod>2026-11-08</lastmod><image:image><image:loc>https://larp-security.com/og/dfir-ctf-challenge-design-dns-tunneling-key-exfiltration-timeline.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/javascript-injection-publisher-widget-script-xss/</loc><lastmod>2026-11-07</lastmod><image:image><image:loc>https://larp-security.com/og/javascript-injection-publisher-widget-script-xss.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/business-logic-entitlement-bypass-race-conditions/</loc><lastmod>2026-11-04</lastmod><image:image><image:loc>https://larp-security.com/og/business-logic-entitlement-bypass-race-conditions.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/unauthenticated-stored-xss-checkout-cancel-url-cors-merchant-admin-api/</loc><lastmod>2026-11-03</lastmod><image:image><image:loc>https://larp-security.com/og/unauthenticated-stored-xss-checkout-cancel-url-cors-merchant-admin-api.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/ooxml-external-relationship-ssrf-resume-parser-read-back/</loc><lastmod>2026-10-23</lastmod><image:image><image:loc>https://larp-security.com/og/ooxml-external-relationship-ssrf-resume-parser-read-back.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/jira-forge-app-context-token-revoked-admin-authorization/</loc><lastmod>2026-10-20</lastmod><image:image><image:loc>https://larp-security.com/og/jira-forge-app-context-token-revoked-admin-authorization.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/chat-bot-framework-attachment-url-token-leak-ssrf/</loc><lastmod>2026-10-16</lastmod><image:image><image:loc>https://larp-security.com/og/chat-bot-framework-attachment-url-token-leak-ssrf.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/dom-xss-textcontent-sanitizer-entity-decoding-bypass/</loc><lastmod>2026-10-09</lastmod><image:image><image:loc>https://larp-security.com/og/dom-xss-textcontent-sanitizer-entity-decoding-bypass.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/response-manipulation-client-side-authorization-bypass/</loc><lastmod>2026-10-06</lastmod><image:image><image:loc>https://larp-security.com/og/response-manipulation-client-side-authorization-bypass.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/spf-include-abandoned-host-dmarc-bypass/</loc><lastmod>2026-09-15</lastmod><image:image><image:loc>https://larp-security.com/og/spf-include-abandoned-host-dmarc-bypass.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/dpapi-ng-pinned-clipboard-microsoft-account-keepass-forensics-ctf/</loc><lastmod>2026-08-26</lastmod><image:image><image:loc>https://larp-security.com/og/dpapi-ng-pinned-clipboard-microsoft-account-keepass-forensics-ctf.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/sbom-sca-vulnerability-reachability-study/</loc><lastmod>2026-08-24</lastmod><image:image><image:loc>https://larp-security.com/og/sbom-sca-vulnerability-reachability-study.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/africc-ctf-template-literal-injection-path-traversal-jinja-ssti/</loc><lastmod>2026-08-20</lastmod><image:image><image:loc>https://larp-security.com/og/africc-ctf-template-literal-injection-path-traversal-jinja-ssti.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/africc-ctf-length-wrap-yara-oracle-crlf-request-smuggling/</loc><lastmod>2026-08-16</lastmod><image:image><image:loc>https://larp-security.com/og/africc-ctf-length-wrap-yara-oracle-crlf-request-smuggling.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/battlechain-confidence-pool-corrupted-grace-period-anchored-to-expiry/</loc><lastmod>2026-08-12</lastmod><image:image><image:loc>https://larp-security.com/og/battlechain-confidence-pool-corrupted-grace-period-anchored-to-expiry.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/supabase-anon-key-open-signup-cors-internal-expenses-portal/</loc><lastmod>2026-06-09</lastmod><image:image><image:loc>https://larp-security.com/og/supabase-anon-key-open-signup-cors-internal-expenses-portal.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/system-informer-phsvc-integer-overflow-count-sizeof-rtlulongmult/</loc><lastmod>2026-04-28</lastmod><image:image><image:loc>https://larp-security.com/og/system-informer-phsvc-integer-overflow-count-sizeof-rtlulongmult.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/ida-pro-mcp-dns-rebinding-host-header-validation/</loc><lastmod>2026-04-21</lastmod><image:image><image:loc>https://larp-security.com/og/ida-pro-mcp-dns-rebinding-host-header-validation.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/ai-support-chatbot-internal-knowledge-base-leak/</loc><lastmod>2026-04-14</lastmod><image:image><image:loc>https://larp-security.com/og/ai-support-chatbot-internal-knowledge-base-leak.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/mass-assignment-forging-audit-trail/</loc><lastmod>2026-02-17</lastmod><image:image><image:loc>https://larp-security.com/og/mass-assignment-forging-audit-trail.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/stnxm-erc4626-uniswap-v3-slot0-share-price-duplicate-tranche-ids/</loc><lastmod>2025-12-18</lastmod><image:image><image:loc>https://larp-security.com/og/stnxm-erc4626-uniswap-v3-slot0-share-price-duplicate-tranche-ids.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/idor-missing-owner-checks-empty-scope-bypass/</loc><lastmod>2025-12-09</lastmod><image:image><image:loc>https://larp-security.com/og/idor-missing-owner-checks-empty-scope-bypass.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/v8-maglev-write-barrier-use-after-free-crbug-434513380-oob-array/</loc><lastmod>2025-11-20</lastmod><image:image><image:loc>https://larp-security.com/og/v8-maglev-write-barrier-use-after-free-crbug-434513380-oob-array.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/research/unauthenticated-api-login-routing-overwrite/</loc><lastmod>2025-10-21</lastmod><image:image><image:loc>https://larp-security.com/og/unauthenticated-api-login-routing-overwrite.jpg</image:loc></image:image></url>
  <url><loc>https://larp-security.com/advisories/cve-2026-121741/</loc><lastmod>2026-11-06</lastmod></url>
  <url><loc>https://larp-security.com/team/0xsila/</loc><lastmod>2026-11-04</lastmod></url>
  <url><loc>https://larp-security.com/team/cuddest/</loc><lastmod>2026-08-24</lastmod></url>
  <url><loc>https://larp-security.com/team/f4xd/</loc><lastmod>2026-09-15</lastmod></url>
  <url><loc>https://larp-security.com/team/ilov3c4ndy/</loc><lastmod>2026-11-07</lastmod></url>
  <url><loc>https://larp-security.com/team/zx41r/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://larp-security.com/team/zaizr/</loc><lastmod>2026-11-09</lastmod></url>
  <url><loc>https://larp-security.com/team/n3r0/</loc><lastmod>2026-11-08</lastmod></url>
  <url><loc>https://larp-security.com/team/r1ngz3ro/</loc><lastmod>2025-11-20</lastmod></url>
  <url><loc>https://larp-security.com/team/r4y4n3/</loc><lastmod>2026-11-10</lastmod></url>
  <url><loc>https://larp-security.com/team/houssem0x1/</loc><lastmod>2026-08-26</lastmod></url>
</urlset>
