Why this site exists
I use this space to publish bug bounty writeups after a finding is eligible for public disclosure. Each post aims to make the underlying issue understandable, reproducible, and useful to defenders and fellow researchers.
Browse the writeup archive for published case studies. The writeup template shows the structure I use to document each finding.
What you can expect
- Scope, affected behavior, and a concise summary up front.
- Reproduction steps that distinguish observation from inference.
- Impact described in terms of what was actually demonstrated.
- Disclosure status and any details withheld to protect users.
Find the project and future updates on GitHub ↗.