Disclosed business logic security vulnerability involving authentication/authorization flaws on HackerOne platform.
Technical Focus & Expertise
Web Application Security
OWASP Top 10, Business Logic Flaws, IDOR, Authentication & Authorization Bypass, CSRF, XSS.
Security Tooling
Burp Suite Professional, sqlmap, Nmap, Wireshark, Custom Python Scripting.
Labs & Environments
Active Directory Lab Environments, VirtualBox, Purple Team Network Breach Simulations.
Featured Security Reports & Research
Technical breakdown and research paper on WP core pre-authentication remote code execution vulnerabilities (CVE-2026-63030 & CVE-2026-60137).