Security Engineer (@securitynode)

I like breaking things that are supposed to be secure. When I’m not hunting vulnerabilities, I’m exploring systems, architectures, and the assumptions behind them.

Security Engineer

About

Available for

Security Engineer's blogs

AWS Resource Control Policies (RCPs): A Practical Security Guide to Enforcing Data Perimeters

OAuth 2.0 vs OpenID Connect (OIDC): What Does OIDC Actually Add?

DOM XSS — Quick Reference with Code Examples

SpEL Injection in Spring: A Practical AppSec Guide with Examples

Java Insecure Deserialization: From Untrusted Data to RCE

Security Engineer

About

Available for

Security Engineer's blogs

AWS Resource Control Policies (RCPs): A Practical Security Guide to Enforcing Data Perimeters

OAuth 2.0 vs OpenID Connect (OIDC): What Does OIDC Actually Add?

DOM XSS — Quick Reference with Code Examples

SpEL Injection in Spring: A Practical AppSec Guide with Examples

Java Insecure Deserialization: From Untrusted Data to RCE

Security Engineer

About

Available for

Security Engineer's blogs

AWS Resource Control Policies (RCPs): A Practical Security Guide to Enforcing Data Perimeters

OAuth 2.0 vs OpenID Connect (OIDC): What Does OIDC Actually Add?

DOM XSS — Quick Reference with Code Examples

SpEL Injection in Spring: A Practical AppSec Guide with Examples

Java Insecure Deserialization: From Untrusted Data to RCE

Search Hashnode

Security Engineer

About

Available for

Security Engineer's blogs

AWS Resource Control Policies (RCPs): A Practical Security Guide to Enforcing Data Perimeters

OAuth 2.0 vs OpenID Connect (OIDC): What Does OIDC Actually Add?

DOM XSS — Quick Reference with Code Examples

SpEL Injection in Spring: A Practical AppSec Guide with Examples

Java Insecure Deserialization: From Untrusted Data to RCE