AT&T Security Hall of Fame: Reflective XSS Vulnerability

In 2016, I discovered a GET-based reflective cross-site-scripting (XSS) vulnerability on a subdomain belonging to AT&T.

Open Bug Bounty: 3048 Patched Vulnerabilities

Over a 36 month period, I helped remediate 3048 vulnerabilities through Open Bug Bounty.

13 Dec 2018

Paid Members Public

In 2018, I discovered a GET-based reflective cross-site-scripting (XSS) vulnerability on the homepage of the BBC.

10 Jan 2018

Paid Members Public

In 2018, I discovered a remote command execution (RCE) vulnerability on University of Twente's website.