Data Security Research
Security findings and disclosures. Nothing is leaked, I only identify and report.
Disclosed Vulnerabilities
Customer information publicly accessible. Emails, phone numbers, order information exposed. 3,000+ customers affected. Vulnerability reported to owner, site was closed.
Allowed value spoofing - players could send illegal values (infinite health, money) to servers. Client-Side instructions like take damage could be nopped. Reported and the developers were toxic.
Store page flaw permitting unpaid orders to be marked as accepted. Initial denial of claims; only acknowledged after $40,000,000 donation. Staff were rude and arrogant.
Modding framework vulnerability enabling malicious code execution outside the modding container. Framework users exposed to RCE risks beyond intended scope.
SQL injection in the big 26 come on bro. Reported and patched. Millions of accounts, dating back to 2002.
RCE in custom scripting utility, had basic HTTP blocking but was a bit too easy to get around. Developers patched.
Poorly made gamesense clone; client featured a RAT and owner was arrogant and toxic. Users dumped, site remains active.
Research Areas
Finding and documenting security flaws in applications and services.
Reverse engineering client-side protections and anti-tamper systems.
Implementing and auditing cryptographic systems.
Compliance auditing and incident response.