Cybersecurity Researcher & Bug Hunter

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Categories

Categories

Categories

Security 2 categories , 5 posts

Bug-Bounty 4 posts
Web-Security 5 posts

Recently Updated

Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover
From a Sanitized Name Field to One-Click Account Takeover
Turning JavaScript Error Handling into XSS
Deanonymizing Users at Scale: When Blocking Becomes an Oracle
A University Web Audit

Trending Tags

web-security bug-bounty account-takeover xss blind-xss business-logic cache-deception client-side-path-traversal cookie-bomb cspt

© 2026 Jorge Cerezo Dacosta. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

web-security bug-bounty account-takeover xss blind-xss business-logic cache-deception client-side-path-traversal cookie-bomb cspt

New content available