Through my limited time pentesting, I have had the opportunity to work on some pretty cool projects. From testing AI chatbots, national security projects, and fortune 500 banks I have have seen flaws in nearly all of them in one way or another.
In this section I want to show off some real world finds I have had with some heavy redactions due to NDAs and such. Mostly it will just go over topics I have had to deep dive a bit more than other types of exploits because I wanted to show off a full-chain exploit as much as possible.