Projects

A collection of things I've built.

AllCybersecSecurityPenetration TestingTYPO3NürnbergBug BountyIHKPentestCSPWordPressElementorDrupalGitLabWebflowCloudflareDMARCVercelSPAInfoparkBielefeldjavascriptleafletdata-visualizationsvgcilipopen-datapythonocrsqlitewebscrapingcomputer-visiondesktopmappingtimelinevitescss

Security Audit: Technische Hochschule Nürnberg

External black-box security audit of th-nuernberg.de (TYPO3 CMS)

CybersecSecurityPenetration TestingTYPO3Nürnberg

Security Audit: boundaryandmind.com

External black-box security scan of boundaryandmind.com (WordPress 6.9.4 with Elementor)

CybersecSecurityPenetration TestingWordPressElementor

Security Scan: drupal.org

External black-box security scan of drupal.org — Drupal 7 EOL, GitLab 4.47.0 public API, Keycloak SSO

CybersecSecurityDrupalGitLabBug Bounty

Security Audit: lankaroots.org

External black-box security scan of lankaroots.org (Webflow on Cloudflare + AWS Lambda)

CybersecSecurityPenetration TestingWebflowCloudflare

Security Audit: KNAPP AG (knapp.com)

External black-box security audit of knapp.com (WordPress on knapp.at) — DMARC p=none, CSP weaknesses, jQuery CVE

CybersecSecurityPenetration TestingWordPressCSPDMARC

Security Audit: bewertiq.org

External black-box security audit and real attack attempt on bewertiq.org (Vite SPA on Vercel)

CybersecSecurityPenetration TestingVercelSPA

Security Audit: Landgericht Bielefeld

External black-box security audit of lg-bielefeld.nrw.de (Infopark CMS Fiona 7.0.2)

CybersecSecurityPenetration TestingInfoparkBielefeld

Security Audit: OCTA Steuerberater

External black-box security audit of octa-stb.de (WordPress on Apache)

CybersecSecurityPenetration TestingWordPressBielefeld