My Work

Vulnerability Research

• CVE-2021-21705: SSRF Bypass in PHP 8
• CVE-2021-27902: Stored XSS in CraftCMS
• CVE-2021-27903: Code Execution via SSTI in CraftCMS
• CVE-2021-3603: Function injection vulnerability in PHPMailer
• Function Injection Vulnerability in Laravel
• URL validation check bypass in Laravel
• Acronis: Account Takeover on unverified emails in File Sync & Share
• Coda: Unrestricted access to any "connected pack" on docs
• Open Redirect in Flattr
• Cross-site Scripting (XSS) -- Stored in OctoberCMS
• Code Execution using Reflected Cross Site Scripting in TagSpaces
• Cross-site Scripting (XSS) -- Reflected in TagSpaces
• Relative Path Traversal in Flarum
• Site wide stored XSS via CSTI (Authenticated) in Monica CRM
• Stored XSS (Authenticated) via Unrestricted file upload in Monica CRM
• Stored XSS (Authenticated) via Unvalidated Input in Monica CRM
• Cross-site Scripting (XSS) - Stored in Mautic

Open Source Projects

• takeover.py - A script to detect subdomain takeovers
• whack - Wordlists generated from package management repositories
• webdetect - A script to detect technologies using Wappalyzer and headless browser

Publications and blogs

1. This blog https://hackberry.xyz/posts