Houzz Security Hall of Fame: Blind Based SQL Injection (SQLI)

In 2016, I discovered a blind based SQL injection (SQLI) vulnerability on the Houzz website.

Open Bug Bounty: 3048 Patched Vulnerabilities

Over a 36 month period, I helped remediate 3048 vulnerabilities through Open Bug Bounty.

13 Dec 2018

Paid Members Public

In 2018, I discovered a GET-based reflective cross-site-scripting (XSS) vulnerability on the homepage of the BBC.

10 Jan 2018

Paid Members Public

In 2018, I discovered a remote command execution (RCE) vulnerability on University of Twente's website.