RESEARCH & WRITE-UPS

From discovery
to understanding.

Technical articles, vulnerability research, and insights from the offensive side.

These summaries are preserved from the original portfolio. Full reports and publication links have not been provided.

Bug Bounty01

Oct 15, 2024

Critical XSS in Fortune 500 Company

Discovered a stored XSS vulnerability affecting 50M+ users. Full technical breakdown and exploitation chain.

Summary · full article not linked

Research02

Sep 28, 2024

Subdomain Takeover at Scale

Automated methodology for discovering subdomain takeover vulnerabilities across large infrastructure.

Summary · full article not linked

Write-up03

Aug 12, 2024

IDOR to Account Takeover

Chaining multiple IDOR vulnerabilities to achieve full account takeover. Step-by-step analysis.

Summary · full article not linked

Bug Bounty04

Jul 05, 2024

Race Condition in Payment Flow

Exploiting a race condition to duplicate payment transactions. $10,000 bounty awarded.

Summary · full article not linked

Tutorial05

Jun 20, 2024

API Security Best Practices

Comprehensive guide to securing REST APIs and common vulnerability patterns to avoid.

Summary · full article not linked

Research06

May 15, 2024

Mobile App Reverse Engineering

Deep dive into Android app security: from decompilation to discovering hidden endpoints.

Summary · full article not linked

Let’s talk security.

Get in touch ↗