Presenting at DEF CON 26 - Bug Bounty Hunting on Steroids
(Update: The talk recording is now up on YouTube, latest links to related content in this tweet)
»Atlassian Confluence: Cross-Site Scripting (XSS) (CVE-2017-16856)
Earlier this year I spent some time delving into Atlassian Confluence to see if I could dig up any bugs that had slipped through the... »
Presenting all the things! (BSides Wellington, CSides Canberra, SecTalks Canberra)
Recently I had the opportunity to present at a few local security meetups, and one international security conference.
»Squiz Matrix: Multiple vulnerabilities
Earlier this year I had an opportunity to spend some time looking at Squiz Matrix, a Content Management System (CMS) used across a number of... »
An unexpected journey with webpack and RequireJS
So the other day I ran into what seemed like a bug in some software I was using during a test. Narrowing things down in... »