Areas of Technical Expertise
Organized research focus areas across Web Application Security and API Security. Presented as a rigorous technical taxonomy rather than arbitrary proficiency scores.
Web Application Security
Browser-to-server security architecture and trust boundary analysis
Authentication & Session Integrity
OAuth2/OIDC flow validation, session token lifecycle, state parameter races, multi-factor bypasses, and session fixation vulnerabilities.
Authorization & Access Controls
Vertical and horizontal privilege escalation, forced browsing, contextual role permission bypasses, and multi-tenant tenant isolation flaws.
Business Logic & State Desynchronization
Order flow state manipulation, currency/unit discrepancies, voucher/coupon race conditions, and multi-step transaction circumvention.
Server-Side Request Handling (SSRF)
Blind and second-order SSRF, DNS rebinding against cloud metadata services (169.254.169.254), egress proxy bypasses, and parser confusion.
Injection & Input Validation
SQL/NoSQL injection, template engine injection (SSTI), command execution boundaries, and unsafe deserialization mechanisms.
File Upload & Asset Storage Security
Path traversal, mime-type sniffing, SVG stored XSS, polyglot files, and presigned S3 upload URL authorization validation.
API & Microservice Security
REST, GraphQL, gRPC, and federated service mesh vulnerability research
Broken Object Level Authorization (BOLA / IDOR)
Direct object reference enumeration in REST and GraphQL APIs, missing tenant context joins, and UUID predictability.
Broken Function Level Authorization (BFLA)
Administrative endpoint exposure, HTTP method swapping (e.g. GET vs POST vs PATCH), and undocumented internal debug routes.
Mass Assignment & Object Property Binding
Over-posting parameters into domain models, elevating user roles via profile updates, and modifying immutable audit fields.
API Authentication & Token Handling
JWT secret key bruteforce, algorithm confusion ("none" / RS256 to HS256), missing revocation checks, and token leakage in URL parameters.
Excessive Data Exposure
API endpoints filtering data on the client side while returning entire user objects (hashes, PII, internal flags) in JSON responses.
Rate Limiting & Resource Exhaustion
Bypassing throttling via header rotation (X-Forwarded-For), GraphQL query depth exhaustion, and batch operation abuse.
Ready to test these vulnerability concepts?
Inspect live synthetic HTTP request and response pairs in the Security Arena.