Privilege escalation through a GraphQL authorization gap
A GraphQL authorization gap let a limited Program Admin join privileged groups and gain report and reward permissions.
Independent Security Researcher
Testing the assumptions behind the interface.
I find security vulnerabilities, report them responsibly, and share what I learn.
INDEX / LATEST
Latest writeups
Bypassing HackerOne 2FA due to race condition.
A race condition in HackerOne’s 2FA recovery flow created multiple active reset requests, allowing one cancellation to leave others valid.
A practical workflow for small-scope bug bounty programs
A repeatable workflow for understanding compact targets, exercising every endpoint, and finding product-logic flaws beyond basic reconnaissance.
2FA bypass through information disclosure and improper access control
Pre-authentication state and an organization-switch endpoint combined to bypass 2FA.
Account takeover through an unbound email-change link
An email-change confirmation link updated whichever account opened it because the token was not bound to the account that requested the change.