Articles
Articles
Longer pieces I’ve published on Medium — reverse-engineering, API security and real-world logic flaws. For write-ups hosted on this site, see Writeups.
Medium articles
- Write-up Medium
Reverse Engineering API Security: Breaking “Request-Hash” / Signature Protection
How a hardcoded signing key in an Android app let me decompile the APK, recover the key, and forge valid request signatures — ending in a working Python proof of concept.
6 min read #API Security#Android#Reverse Engineering - Write-up Medium
How I Hacked Payment Verification via Misconfiguration
A course platform accepted a forged payment webhook without verifying its signature — granting full access without paying. A breakdown of the flaw and how both the gateway and the merchant should fix it.
5 min read #Logic Flaw#Payments#Webhooks - Guide Medium
How to Link Tor with Burp Suite
A step-by-step guide to routing Burp Suite through Tor’s SOCKS proxy to reach geo-blocked targets and mask your IP during authorized testing.
6 min read #Tradecraft#Burp Suite#Tor