Someone close to me spent months building a business from the ground up. When things started moving forward, he launched a website to take it to the next level.
Then one day, the website was attacked.
The attack took the website offline for a significant period, causing serious financial losses. But what affected me most was seeing someone close to me lose confidence in his self and in something he had spent months building — because of a single security incident.
That experience made me ask myself:
Manual security testing of web applications to identify vulnerabilities across authentication, authorization, business logic, and application functionality.
Security testing of REST APIs, focusing on authentication, authorization, business logic, and access control.
Researching and validating security vulnerabilities across real-world web applications and APIs.
Vulnerability research, bug bounty testing, and security assessment of web applications.
Manual penetration testing of web applications and APIs, with a focus on authentication, authorization, and business logic.
critical authorization flaw in modern application.
WEB SECURITYUnderstanding how JWT tokens get compromised .
BUG BOUNTYwhat if someone can access your account even after change the password?!
Or just write me a letter here_