Blogs

Writeups, research, and security insights.

When the AI Assistant Skips the Permission Checks the Rest of the App Follows

Sep 8, 2026 4 min read

When the AI Assistant Skips the Permission Checks the Rest of the App Follows

Writeups Broken Access Control AI PII

How I Chained 2FA Bypasses in a Crypto P2P System to Drain User USDT

Jul 24, 2025 2 min read

How I Chained 2FA Bypasses in a Crypto P2P System to Drain User USDT

Writeups 2FA Bypass Crypto P2P

Bypass WAF by a Simple Trick — Gained $1000 Bounty

Sep 3, 2023 3 min read

Bypass WAF by a Simple Trick — Gained $1000 Bounty

Writeups WAF Bypass Cloudflare Bug Bounty

How I Got Two RCE at a BBP Program

Aug 10, 2023 3 min read

How I Got Two RCE at a BBP Program

Writeups RCE SAP Commerce Shodan