Projects

A collection of things I've built.

Security Audit: Bielefeld University (uni-bielefeld.de)

External black-box security audit of uni-bielefeld.de (Roxen CMS) — zero security headers, DMARC p=none, SPF softfail, search subdomain HTTP downgrade

CybersecSecurityPenetration TestingRoxenDMARCHeaders

Live Demo →

Security Audit: Howzit Bielefeld (howzitbielefeld.de)

External black-box security audit of howzitbielefeld.de (WordPress 7.0 on IONOS) — missing security headers, missing DMARC, admin user enumeration

CybersecSecurityPenetration TestingWordPressDMARCHeaders

Live Demo →

Security Audit: KNAPP AG (knapp.com)

External black-box security audit of knapp.com (WordPress on knapp.at) — DMARC p=none, CSP weaknesses, jQuery CVE

CybersecSecurityPenetration TestingWordPressCSPDMARC