-
No Auth Required: How One GraphQL Query Exposed 27,000+ Home Addresses
A writeup of my first bug bounty submission, detailing how a public-by-design GraphQL query exposed over 27,000 personal home addresses due to a platform integration flaw.
• 3 min read
-
Boredom and Burp Suite: How I Accidentally Compromised Hundreds Of Gyms
A quick writeup on how I accidentally compromised a major gym SaaS provider by poking at legacy API endpoints.
• 4 min read
-
Creating a crypter with Python
A quick writeup about how I wrote a crypter for a school project in Python.
• 13 min read