#ai

• neural networks in cobol and other creative ways to k*ll yourself 20251229

#appsec

• making owasp asvs actually usable 20241014

#asvs

• making owasp asvs actually usable 20241014

#bugbounty

• exfiltrating a db via blind sqli using python 20241211
• nuxt misconfig exposed +6,700 user records 20241120
• don't blindly trust public exploits 20240802
• triggering xss in hidden inputs 20240709
• recon harder or how I found a hidden blind sqli 20240330

#bypass

• react2shell or prototype pollution going brrr 20251214

#cert

• my experience passing the oswe cert 20251203

#charts

• using node graphs for subdomain relationship mapping 20250409

#cobol

• neural networks in cobol and other creative ways to k*ll yourself 20251229

#cve

• react2shell or prototype pollution going brrr 20251214
• don't blindly trust public exploits 20240802

#exploit

• don't blindly trust public exploits 20240802

#humor

• neural networks in cobol and other creative ways to k*ll yourself 20251229

#idor

• nuxt misconfig exposed +6,700 user records 20241120

#mainframe

• neural networks in cobol and other creative ways to k*ll yourself 20251229

#malware

• don't blindly trust public exploits 20240802

#misc

• hello world 20251126

#neuralnetwork

• neural networks in cobol and other creative ways to k*ll yourself 20251229

#oswe

• my experience passing the oswe cert 20251203

#owasp

• making owasp asvs actually usable 20241014

#pentesting

• my experience passing the oswe cert 20251203

#pii

• nuxt misconfig exposed +6,700 user records 20241120

#python

• exfiltrating a db via blind sqli using python 20241211

#rce

• react2shell or prototype pollution going brrr 20251214

#react

• react2shell or prototype pollution going brrr 20251214

#react2shell

• react2shell or prototype pollution going brrr 20251214

#recon

• using node graphs for subdomain relationship mapping 20250409
• recon harder or how I found a hidden blind sqli 20240330

#sqli

• exfiltrating a db via blind sqli using python 20241211
• recon harder or how I found a hidden blind sqli 20240330

#subdomains

• using node graphs for subdomain relationship mapping 20250409

#waf

• react2shell or prototype pollution going brrr 20251214

#xss

• triggering xss in hidden inputs 20240709