01 / 2024Independent research
Breaking the first-run boundary
Two independently discovered flaws in GoAnywhere MFT turned an initialization route into unauthenticated administrative access.
CVE-2024-0204 · CVE-2024-25156
01 / Research archive
Vulnerability
research
Selected vulnerability research, contest work, and coordinated disclosures. Each entry separates personal findings, co-research, and team outcomes.
IndependentCo-researchTeam
02 / 2026Independent research
SAML identity mismatch in authentik
An XML-comment interpretation conflict could bind an attacker's signed external identity to an existing authentik account.
CVE-2026-57580
03 / 2025Independent research
Chaining SSRF into session compromise
An unauthenticated SSRF and improper log neutralization in a-blog cms could be combined to hijack an administrative session.
CVE-2025-36560 · CVE-2025-41429
04 / 2026Co-research · with Ductinn
Unauthenticated RCE in 9Router
Missing authentication exposed privileged functionality; operating-system command injection turned that access into remote code execution.
Research method
- 01Model the boundary
Map how identity, parsing, and state move between components.
- 02Reduce the finding
Turn odd behavior into the smallest reproducible security claim.
- 03Coordinate disclosure
Give maintainers evidence they can validate, fix, and communicate.