Writing
Archive
Security write-ups, guides and notes — everything I’ve published, whether it lives on this site or elsewhere. Findings appear here only after they are fixed and cleared for disclosure.
2026
- How to Link Tor with Burp Suite
A step-by-step guide to routing Burp Suite through Tor’s SOCKS proxy to reach geo-blocked targets and mask your IP during authorized testing.
- How I Hacked Payment Verification via Misconfiguration
A course platform accepted a forged payment webhook without verifying its signature — granting full access without paying. A breakdown of the flaw and how both the gateway and the merchant should fix it.
2025
- Reverse Engineering API Security: Breaking “Request-Hash” / Signature Protection
How a hardcoded signing key in an Android app let me decompile the APK, recover the key, and forge valid request signatures — ending in a working Python proof of concept.
No match. Try a shorter keyword or clear the filter.