Notes

Blog

Ad-hoc notes on security work — vulnerabilities I've found, things I've broken, and lessons along the way.

25 May 2026
Finding My First Critical Real-World Vulnerabilities
A chain of vulnerabilities in a third-party service - from publicly exposed APIs to free tickets via unauthenticated payment confirmation.
2 Critical3 High1 Medium
Blog