← About
Blog
Notes
System security, vulnerability research, and things worth writing down.
September 1, 2026
Intigriti Challenge 0826 — Bad Reception
Chaining stored HTML injection with a same-origin JSONP CSP bypass to reach a moderator-only eleventh channel.
August 27, 2026
Setting up this site
A plain HTML page, a self-hosted Caddy server, and why the front page has no CSS.