2026

• 06 Sep Reflected XSS in a JSON POST Body (and Why I Almost Ignored It)
• 20 Jun That Time a Bank Blocked My Account and Still Handed Me a Token
• 17 Jun I Came for RFI, I Left with SSRF + XSS