Security Research
Firsthand vulnerability writeups, public challenge analysis, and responsible disclosure case studies from GK Data manual security testing.
-
NASA GLOBE Observer Stored XSS Case Study
How a mobile observation comment became stored XSS on a public NASA GLOBE web page, with verified impact, root cause, and remediation.
-
Intigriti 0526: Unintended Stored XSS Bypass
An unintended stored XSS path in Intigriti Challenge 0526 involving unsafe innerHTML, observed SCA Shield bypass behavior, and sink-side remediation.
-
Blind Stored XSS Through a Text File Upload
How an accepted text file rendered as HTML became blind stored XSS inside an internal review workflow.