I'm a full-time cybersecurity engineer and part-time independent cybersecurity researcher.
-
🎯 CVE-2025-29471 – Stored XSS + Privilege Escalation in Nagios Log Server 💥PoC Code |
▶️ PoC Demo -
🧨 Nagios Log Server – Elasticsearch DoS 💥PoC Code |
▶️ PoC Demo -
🔑 Nagios Log Server – API Key Exposure 💥PoC Code |
▶️ PoC Demo -
🚨 Observability Platform Exploitation – Identified query abuse, authenticated DoS, and SSRF primitives in a widely deployed enterprise search backend.
-
🕵️ Sensitive Data Exfiltration – Exfiltrated 300+ customer policy documents from a misconfigured system at a Fortune 500 financial services provider.
-
📂 S3 Bucket Discovery – Located sensitive files exposed via public S3 buckets.
-
💳 CORS Misconfiguration – Identified credit card token leakage via overly permissive CORS headers on a LATAM-based food delivery service.
-
🧾 Privacy Issues – Discovered misconfigurations impacting user privacy and exposing PII through metadata from API endpoints on a widely used digital content platform.
Disclaimer: All findings were identified through independent research and disclosed responsibly to the affected vendors. Details have been intentionally withheld in accordance with program restrictions. This work was conducted outside of my employment and reflects my personal efforts in security research.
Check out bug-bounty — a growing repo of scripts I use in recon workflows.