@0SPwn

Jay

@0SPwnUnited KingdomJoined May 2021

About

Hi, I'm Jay, also known as 0SPwn, a 17-year-old cybersecurity enthusiast from the UK. I hold certifications in eJPT and eCPPTv2, and work as a security consultant (Penetration Tester). Currently, I'm a contracted Offensive Security Web Application Trainer with Hack The Box EU and have had the honor of speaking at BSides Cymru 2023.

My expertise lies in identifying and exploiting web application vulnerabilities, and I actively participate in bug bounty programs and Vulnerability Disclosure Programs (VDPs) for major organizations such as Yahoo, Verizon, AT&T, the Department of Defense, System76, and Instagram, among others.

I am passionate about both offensive and defensive security, and I enjoy sharing my knowledge through blogging, and YouTube content creation.

Available for

Mentoring, Penetration Testing

Jay's blogs

0SPwn Blogsrst.hashnode.dev7 posts

Red Bolt Security Blogblog.redbolt.info2 posts

About

I am passionate about both offensive and defensive security, and I enjoy sharing my knowledge through blogging, and YouTube content creation.

Available for

Mentoring, Penetration Testing

Jay's blogs

0SPwn Blogsrst.hashnode.dev7 posts

Red Bolt Security Blogblog.redbolt.info2 posts

Articles Comments

Recently published

JJayrst.hashnode.dev2d ago · 3 min read

PCAP Analysis of a compromised WordPress application.

Reconstructing a WordPress Compromise Using TShark Summary This investigation reconstructs a WordPress compromise using nothing more than a PCAP and TShark. Rather than answering the challenge questio

JJayrst.hashnode.devJul 5, 2024 · 4 min read

How CVE-2022-24785 MomentJS Path Traversal Works: Detailed Exploit Guide

CVE-2022-24785 Description Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a u...

JJayblog.redbolt.infoSep 2, 2023 · 5 min read

Legally Hacking A Government Orbit Satellite Ingest System

Initial Discovery We commenced our investigation by identifying a Satellite Ingest System that appeared to serve as a pivotal point in the town's internet connectivity infrastructure. Our curiosity was piqued by the absence of authentication measures...

JJayblog.redbolt.infoSep 2, 2023 · 3 min read

IDN Homograph Phishing Attacks/Prevention

Introduction to IDN Homograph Attacks Agenda: What is an IDN Homograph Attack? An Example of an IDN Homograph Attack Identifying and Verifying Phishing Email Sources Preventing IDN Homograph Attacks Other Phishing Attack Methods What is an IDN Homo...

JJayrst.hashnode.devNov 29, 2021 · 5 min read

Basic Firmware Reverse Engineering

Hello everyone, today we will be covering something a little different. We will be taking a look at how to reverse engineer firmware which we can then backdoor (I will not be covering backdooring a firmware as I do not have a lab setup however if you...