Blog

January 5, 2019

Facebook Groups Bug Bounty — 2018 ↗

How I bypassed Facebook’s 28-day group-name restriction, found a way to make groups inaccessible, and earned a bug bounty.

June 19, 2017

Solving Google CTF’s Mindreader Challenge ↗

A Google CTF write-up using path traversal and a symbolic-link trick to bypass a regex and read the challenge environment.

March 21, 2017

Shazam — First Hacking Bug Bounty! ↗

Finding Heartbleed on Shazam’s corporate servers with Shodan and receiving my first security bug bounty.