Walkthrough of an Outlook / Exchange information-disclosure issue reachable by sending a crafted PDF that abuses a file-download token via an OAST-style callback.
Read more →Tag
Microsoft
16 items across research, projects, awards, and talks.
Demonstration of spoofing display names when sending polls or surveys inside Microsoft Teams groups — messages appear to come from other members.
Read more →Integrity failure in Microsoft Teams polls / Forms voting — because vote limits are missing, ballots can be cast under other people’s names and appear legitimate in the manager’s voter list.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Ranked #6 among Top Office researchers on the MSRC 2023 Q3 Security Researcher Leaderboard. Public name listing was missed after a late name submission; **ranking confirmed by MSRC email verification**.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Named among Microsoft MSRC’s 2020 Most Valuable Security Researchers — my primary recognition highlight. Selected for volume, accuracy, and impact of vulnerability reports between July 2019 and June 2020.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Recognized by the Microsoft Security Response Center for a responsibly disclosed security vulnerability.
Read more →Browse sections: Research · Projects · Award · Discoveries and Talk