Posts

All the articles I've posted.

• Kicking the Bucket: Critical RCE and Cross-Tenant Exploits in 3 Different GCP Products

  14 Apr, 2026

  How my bucket-squatting research uncovered three cross-tenant vulnerabilities - GeminiSquat (CVE-2026-1727), MountSquat and VertexSquat (CVE-2026-2473) - affecting Gemini Enterprise, Cloud Run, and Vertex AI.

• GatewayToHeaven: Finding a Critical Cross-Tenant Exploit in GCP's Apigee

  28 Jan, 2026

  A technical step-by-step writeup about finding CVE-2025-13292, a cross-tenant vulnerability in Google Cloud's Apigee. This vulnerability allowed an attacker to gain read/write access to verbose cross-tenant access logs and analytics data that could contain access tokens of end users.

• 2Cool4School Writeup - Kalmar CTF 2023

  18 Jun, 2023

  A writeup for the web challenge 2Cool4School from Kalmar CTF 2023. This writeup examines hidden APIs discovered through Swagger documentation, finding a CSRF in the profile picture upload functionality of a website, and taking advantage of an HTTP parameter injection in a faulty SSO flow.

• ZeroTrust Writeup - LA CTF 2023

  15 Feb, 2023

  A writeup for the web challenge ZeroTrust from LA CTF 2023. This writeup details how to exploit a misconfigured AES GCM rolling cipher to modify an authentication cookie and read the contents of the flag.