Writeups

External articles and writeups I’ve published.

Split the payload, not the cheque — Five P3s walk into a bar. One critical walks out.

Dangling markup, DOM clobbering, CSS injection, and a JS bridge — five low-severity primitives, chained into one Android account takeover.

Published on This site

---

How I Was Able to Reveal Confidential Financial Statements via IDOR

Having fun with IDORs.

Published on LinkedIn

---

Hacking a Unity Game on Android in 5 Minutes Using Frida

Quick and powerful Frida runtime hook on Unity-based Android games. Minimal time, maximal impact.

Published on LinkedIn

---

Hacking Android Games – Deep Dive

A comprehensive breakdown of Android game hacking with Frida, patching, reversing, and real-world tricks.

Published on 8ksec

---

Stealing User Files – XSS to Local File Inclusion

From a ‘harmless’ stored XSS to stealing sensitive files through chained exploits.

Published on LinkedIn

---