Security & Research

This is a directory listing containing links to my own independent security research projects, including blog posts and filed CVE advisory information as applicable.

• DMARC'd for Death: Anonymous Stored XSS for Email Admins

• WebObjects Arbitrary HTTP Header Injection & URL Reflection Cross-site Scripting