Security Research
This section of my website highlights my accomplishments in the hacking space. For the most part, there will be corresponding writeups either on this website or hosted externally for each of my CVEs. As far as the company hacking that I have accomplished, most of the bugs cannot be publicly disclosed per NDAs or out of respect for the Company that I have coordinated disclosure with. Any interesting vulnerability writeups that I have done can be found in the "Writeups" section below.
CVE-2021-40875: Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulting in sensitive information exposure