DoS via GraphQL Batching
Application-level denial-of-service vulnerability through GraphQL batching and resource exhaustion, resulting in approximately 72× request amplification.
Vulnerability Research
Bug Bounties & Real-World Reports.
A collection of documented security findings from bug bounty programs and independent testing, including vulnerability analysis, exploitation impact and technical evidence.
Bug Bounty Programs
Independent Pentests
Reflected XSS & HPP
Reflected cross-site scripting combined with HTTP Parameter Pollution in a real e-commerce application, enabling cookie exfiltration and potential session hijacking.
XSS with Account Takeover
Cross-site scripting vulnerability involving an outdated Bootstrap component, enabling session hijacking and complete compromise of an authenticated user account.