---
title: "HamidSj (@Pitok) | Hashnode"
description: "Software Engineer | Security Researcher. Read the latest articles by HamidSj on Hashnode."
url: "https://hashnode.com/@Pitok"
---

@Pitok

# HamidSj

@Pitok · Milano, Italy · Joined August 2025

Software Engineer | Security Researcher

[Website](https://linktr.ee/hamedsj5)

### [DOM XSS to Account Takeover: Not-So-Dirty Dancing in GIS SDK](https://blog.voorivex.team/not-so-dirty-dancing-in-gis-sdk?utm_source=hashnode&utm_medium=feed)

Discover how a clever DOM XSS bypass led to an automated account takeover by exploiting OAuth flows in GIS SDK

10 min read · [blog.voorivex.team](https://blog.voorivex.team/not-so-dirty-dancing-in-gis-sdk?utm_source=hashnode&utm_medium=feed)

[6](https://hashnode.com/posts/not-so-dirty-dancing-in-gis-sdk/6935b9294a0453e1cf983805) [Dec 7, 2025](https://hashnode.com/posts/not-so-dirty-dancing-in-gis-sdk/6935b9294a0453e1cf983805)