Articles

Security research and bug bounty writeups. 2 posts.

A connectivity test panel in a bug bounty program took an SSH host, shrugged off thirty minutes of SSRF testing, and never expected a semicolon.

Sep 17, 2026 6 min read

This article explains how I found an XML External Entity (XXE) injection through a specially crafted PDF file.

Aug 23, 2025 8 min read