Responsible Disclosure
Bug Bounty Findings
Security vulnerabilities responsibly disclosed to major technology companies through their bug bounty programs. Detailed technical write-ups are available in the Member Zone.
Data Exposure
Identified a security flaw allowing unauthorised access to sensitive repository data, reported to GitHub Security.
Security Flaw
Reported a critical security vulnerability in Atlassian's platform affecting access to sensitive project data.
Account Takeover
Identified an account takeover vector in Microsoft's authentication flow, reported through Microsoft MSRC.
Access Control Bypass
Discovered a bypass mechanism in GitHub Copilot's access controls, enabling unauthorised feature access.
Business Logic Flaw
Found a business logic vulnerability allowing bypassing of Copilot subscription pricing controls.
Security Finding
Discovered a security issue in Wiz's cloud security platform, responsibly disclosed to their security team.
Access Full Write-Ups
Detailed technical write-ups, proof-of-concept code, and remediation guidance are available exclusively in the Member Zone.
Access Member Zone