Breaking Assumptions. Securing Systems.
Bug bounty hunter specializing in Web Application Security and API Security. Exploring attack surfaces, uncovering deep logic weaknesses, and translating technical discoveries into clear remediation guidance.
Research Focus Domains
Web Application Security
Investigating complex state machines, authentication and session integrity, input validation boundaries, Server-Side Request Forgery (SSRF), and business logic flaws across modern browser-facing architectures.
API Security & Microservices
Specialized auditing of REST, GraphQL, and microservice meshes. Deep focus on Broken Object Level Authorization (BOLA), mass assignment, gateway token propagation, and endpoint exposure.
Selected Research Findings
Broken Object Level Authorization (BOLA) in Multi-Tenant GraphQL Gateway
A sub-graph resolver failed to enforce contextual tenant ownership validations when resolving nested entity relationships across federated GraphQL gateways.
Second-Order Blind SSRF via Asynchronous Webhook Validation Pipeline
Webhook endpoint URLs were parsed and checked during registration, but resolved asynchronously in background workers without re-validating DNS resolutions against internal cloud metadata endpoints.
Mass Assignment Flaw in Enterprise Role Provisioning Endpoint
An internal user profile update PATCH endpoint deserialized unmapped JSON request properties directly into domain model entities without an explicit DTO filter.
Security Research Methodology
Scope & Recon
Map authorized domains, endpoints, and architectural roles.
Surface Modeling
Identify trust boundaries and state transitions.
Hypothesis Design
Construct targeted test cases around edge conditions.
Controlled Validation
Verify behavior non-destructively within defined limits.
Impact Assessment
Quantify actual confidentiality and integrity exposure.
Evidence Collection
Capture deterministic reproduction steps and raw HTTP traces.
Coordinated Disclosure
Submit structured findings directly to security teams.
Remediation Review
Assist in evaluating permanent architectural patches.
Think You've Found a Challenge?
Have an authorized Web or API environment with an elusive security anomaly? Submit the scope to challenge my research workflow. Every submission receives a private tracking token.
Test Your Security Instincts
Practice identifying realistic Web and API vulnerabilities in safe synthetic environments. Analyze raw HTTP request and response pairs, reason through access flaws, and submit validated flags.