Blog

Disclosure notes, build logs, and technical writeups from projects I am figuring out in public.

Hacking GISEC Before Speaking at GISEC

Two weeks before my talk, a file-download flaw on GISEC’s registration platform exposed application secrets and gave me read access to visitor and payment records.

security disclosure web