XSSpecter
Peer-reviewed conference paper
Research
Evidence, systems, and the notes between them.
I investigate web, API, and browser security through authorized testing, independent research, tooling, and public technical writing.
Research archive lens
Public artifacts, held in one field of view.
The lens surfaces papers, tools, notes, and labs without exposing private targets, payloads, or report material.
Intigriti 1025 RCE Challenge
Challenge writeup
Client-Side Path Traversal to JSONP-Based XSS
Web security technique
XSSpecter
Open-source software
bcollabtodiscord
Open-source software
Reflector
Open-source fork
Complete index
Papers, techniques, tools, labs, and notes.
Older writing is preserved in its original context and clearly marked as archival material.
01
Research notes
5 recordsIntigriti 1025 RCE Challenge
A controlled challenge analysis covering SSRF-assisted file access, upload validation, and command-execution reasoning.
Author
Intigriti
Intigriti 1221 XSS Challenge
An analysis of referrer behavior, Unicode normalization, and the final cross-site scripting chain.
Author
Intigriti
Originally published in 2021; tools and platform behavior may have changed.
Intigriti 1021 XSS Challenge
A public solution and reasoning trail for the October 2021 XSS challenge.
Author
Intigriti
Originally published in 2021; tools and platform behavior may have changed.
Intigriti 0821 XSS Challenge
A prototype-pollution and DOM-XSS challenge analysis involving jquery-deparam and a Google Analytics gadget.
Author
Intigriti
Originally published in 2021; tools and platform behavior may have changed.
Intigriti 0321 XSS Challenge
An analysis of predictable CSRF behavior, parsing quirks, iframe behavior, and SameSite cookie considerations.
Author
Intigriti
Originally published in 2021; tools and platform behavior may have changed.
02
Historical and career notes
2 recordsMy Bug Bounty Journey
An early personal account of entering cybersecurity and learning through bug bounty programs.
Author
Isira Adithya Blog
Originally published in 2021 and preserved as a historical account.
My First Bug — Reflected XSS
The story of an early private-program bounty and a reflected-XSS issue in a JavaScript string context.
Author
Isira Adithya Blog
Originally published in 2021 and preserved as a historical account.
03
Security labs
2 recordsTryHackMe VulnNet
A web-enumeration and privilege-escalation lab spanning local file inclusion, uploads, SSH keys, and tar behavior.
Author
TryHackMe
Originally published in 2021; tools and platform behavior may have changed.
TryHackMe Reloaded
A reverse-engineering lab using strings, Ghidra, Immunity Debugger, and binary patching.
Author
TryHackMe
Originally published in 2021; tools and platform behavior may have changed.
04
Tools
1 recordBurp Match and Replace Workflow
A practical note on consistently reshaping requests with Burp Suite match-and-replace rules.
Author
Isira Adithya Blog
Originally published in 2021; tools and platform behavior may have changed.