Writings

• Persis High-Level Human Resource Software - Online Applicant Portal Security Advisory (CVE-2020-35753) Feb 20, 2021
• Insertion of Malicious Links for Execution in Profile Picture - Unvalidated User Input in MS SharePoint 2019 (CVE-2020-1456) Jan 15, 2021
• Pwning eBay - How I Dumped eBay Japan's Website Source Code Nov 28, 2018
• ALEXA TOP 1 MILLION SECURITY - HACKING THE BIG ONES Nov 16, 2018
• Steal Funds from TenX Users – Just Another Bug Bounty Story Feb 27, 2018
• Google Bug Bounty - The 5k Error Page May 17, 2017
• Secure (Desktop) Messengers – Usability vs. Security Feb 24, 2017
• Why the "WhatsApp-backdoor" is not a WhatsApp-backdoor Jan 13, 2017
• Netflix Account Takeover through Automated Phone Calls Nov 07, 2016
• Spoofing your Identity - Breaking Self Service Security Mechanisms Nov 04, 2016
• When Ebay implements a keylogging feature Jun 29, 2016
• Post-Snowden Communication Feb 26, 2016