Security file.

Hover a marked term to decode itTap a marked term to decode it

1. F-01

   US government healthcare program

   An information-disclosureThe bug exposed information that should have stayed private. (The bug exposed information that should have stayed private.) vulnerability in a CMSCenters for Medicare & Medicaid Services, the US government health agency. (Centers for Medicare & Medicaid Services, the US government health agency.) program.

   Bugcrowd · private program

   P5Bugcrowd's priority scale runs from P1, the most severe, to P5, the least. (Bugcrowd's priority scale runs from P1, the most severe, to P5, the least.)Validated

2. F-02

   Mercedes-Benz

   Invited to the private bug bountyCompanies invite outside researchers to find and report security bugs. (Companies invite outside researchers to find and report security bugs.) program.

   Bugcrowd · private program

   Invited

3. F-03

   Client penetration tests

   Web application tests for clients. Details stay within scope.

   Authorized engagements

   Delivered

4. F-04

   TryHackMe top 6%

   Ranked in the top 6% worldwide.

   nullsec0001

   Ranked

• Product

  Offscan

  Local AI code security scanner.

• Bug bounty

  bbctl

  ReconReconnaissance: mapping everything a target exposes before testing it. (Reconnaissance: mapping everything a target exposes before testing it.) to report pipeline for authorized Bugcrowd work, with 619 tests.

• Hardware

  hackypi

  A USB test device for authorized penetration testsAuthorized, simulated attacks that find weaknesses before real attackers do. (Authorized, simulated attacks that find weaknesses before real attackers do.) that ships disarmed and fails closed.

• Hardware

  Deauth Reaper

  A character-driven pwnagotchi I rebuilt from scratch, for authorized Wi-Fi security practice.

• Research

  WR4TH

  Windows Defender evasion research, in a public repo.