~ / research

Security Research

Original techniques, bug-hunting deep dives, and teardown notes.

Bypassing a WAF with parser differentials

2026-02

How inconsistent request parsing between a CDN and origin let a blocked payload slip through.

wafhttpbypass

Chaining IDOR and a race condition for account takeover

2025-11

A timing window in a password-reset flow turned a low-severity IDOR into full ATO.

raceidorato

Story of SQL Injections on One Program (Bugcrowd)

2021-04

A bug bounty story of finding multiple SQL injections across Informix and IBM DB2 databases, and bypassing the WAF with sqlmap tamper scripts.

sqlibug-bountywaf-bypasssqlmap