projects

HackSmarter Web App Pentest

~30 documented findings covering SQLi, XSS, SSRF, CSRF, CORS misconfigs, file upload RCE, and session management vulnerabilities.