BBC Security Hall of Fame: Reflective XSS Vulnerability

In 2018, I discovered a GET-based reflective cross-site-scripting (XSS) vulnerability on the homepage of the BBC.

Open Bug Bounty: 3048 Patched Vulnerabilities

Over a 36 month period, I helped remediate 3048 vulnerabilities through Open Bug Bounty.

10 Jan 2018

Paid Members Public

In 2018, I discovered a remote command execution (RCE) vulnerability on University of Twente's website.

19 Dec 2017

Paid Members Public

In 2017, I discovered a path disclosure vulnerability on a subdomain belonging to United Nations.