Cybersecurity Researcher & Bug Hunter

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Categories

Categories

Categories

Security 2 categories , 4 posts

Bug-Bounty 3 posts
Web-Security 4 posts

Recently Updated

From a Sanitized Name Field to One-Click Account Takeover
Deanonymizing Users at Scale: When Blocking Becomes an Oracle
A University Web Audit
Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover

Trending Tags

web-security account-takeover bug-bounty blind-xss business-logic cache-deception client-side-path-traversal cookie-bomb cspt default-creds

© 2026 Jorge Cerezo Dacosta. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

web-security account-takeover bug-bounty blind-xss business-logic cache-deception client-side-path-traversal cookie-bomb cspt default-creds

A new version of content is available.