when i'm not at my day job i'm breaking modern webapps. into infosec and hacking.

Joined November 2010
Made it onto the Twitch security page (twitch.tv/p/security) :D
4
2
20
the manhunt after the disappearance of a lady in honor of the famous comedian @normmacdonald's death has finally come to an end, resulting in two very, very shallow graves.
1
Write-up of CVE-2015-1287 and CVE-2015-5826: Data exfiltration abusing CSS + UTF-16, one of my greatest findings! blog.innerht.ml/cross-origin…
6
99
143
Warning: the IE's UXSS comes back. Please stop using IE immediately! blog.innerht.ml/ie-uxss/
4
47
40
CSP gotchas, bypasses and what remains when XSS is killed. Featuring a writeup of Twitter's CSRF token exfiltration blog.innerht.ml/csp-2015/
1
58
72
Leak college textbook pdf files not nudes
7
1,301
1
1,417
"I will say it wasn't technically challenging though." — dude rewarded with 1,000,000 flier miles for reporting vuln to United Airways
1
Any of my followers have experience with SQLi in Rails by making calls to the ActiveRecord library? If so, let me know #rubyonrails
1
"lose one friend, lose all friends, lose yourself." — Plays With Squirrels
Whoever put <title>Searching...</title> in /r/Halo's header 👍
2
@Terror thatta boy. Nice name by the way, qt 👀
@Terror hackerone.com go catch yourself some bugs and collect loot m8y
@virus nah it's Spanish. 90% of my random mentions are in Spanish. It's an undocumented phenomenon.