Research & writeups

Blog

Technical deep-dives on the vulnerabilities I find in the wild — how each bug works, the path I took to discover it, the impact, and how to fix the class of issue for good. Heavy on the technique, light on the buzzwords.

Critical2024-07-13 · 4 min

Pre-Auth Full Read SSRF Leaking AWS Keys via Redirect Bypass

How I found a critical SSRF vulnerability that bypassed backend protections via an open redirect, exposing EC2 instance credentials — no authentication required.

SSRFAWSCloudCWE-918
Read writeup →