researcher@authorized-scope:~$ list ./findings
Evidence-led case studies and independent technique guides. Case studies retain their stated triage outcomes; technique guides use synthetic examples and disclose no live target.
Published case studies
Technical reports state their evidence and limits. Process case studies document the disclosure outcome while withholding private report details.
Blind SSRF / TCP reachability oracle
A sanitized bug bounty report documenting a repeatable timing oracle in an authenticated connection-validation workflow and the duplicate triage outcome.
Blind SSRF / DNS validation bypass
A controlled callback and timing analysis showed that a hostname resolving to RFC1918 space reached a backend fetch stage, with impact limited to blind reconnaissance.
Blind SSRF / SMTP reachability oracle
A sanitized report showing how an authenticated SMTP test feature exposed loopback and RFC1918 connection states through timing and error-class differences.
Responsible disclosure process
A private-program reporting case study on evidence discipline, duplicate triage and the limits of what a public portfolio can claim.
Independent methodology
These guides use fictional applications and synthetic data. They are educational examples, not claims of accepted vulnerabilities or program decisions.
Recovery-token exposure / browser telemetry
A synthetic workflow for checking whether a reset token in a page URL is copied into outbound telemetry, with controls that keep observation separate from account-takeover claims.
OAuth refresh-token replay assessment
A synthetic test plan for distinguishing a repeated refresh response from an independently usable token, with controls for client type, resource access and token binding.
Post-login open redirect
A synthetic method for checking whether a login continuation parameter sends an authenticated user to an external site, and for separating a real redirect from an unproven phishing scenario.
Publication standard
Observed results are separated from hypothetical impact and synthetic teaching examples.
Case studies follow their publication terms. Technique guides contain no live target, report ID, credential or private program detail.
Practical checks focus on owned accounts, low request volumes and a reproducible final result.