Whilst working on the BountyCon 2022 CTF, I spent the majority of the time focusing on the Android Trinity challenge. This was one of two PWN...

This post will cover an interesting logic flaw found in a private bug bounty program. Whilst the name of this company will be known as...

Ever noticed that big blue button on the top of every Facebook page? This feature, known as Call to action or CTA is designed for user...

Over the last few years doing bug bounties, it's becoming more and more common for companies to reject reports about Open Redirects. Once upon a...

Back in December 2019 I reported a Microsoft Teams Tenancy Permission bypass that allowed a user to modify...

URL shorteners are great! They allows users to turn a 200 character url into something substansially less. It's ideal for those...