Public security research, responsible disclosures, and tools.
Security Research/
├── CVE / Advisories - Published vulnerabilities and advisories
├── Responsible Disclosure - Coordinated vulnerability disclosure
├── Web Security Research - Browser, client-side, and web app security
├── API Security - REST, GraphQL, gRPC security research
├── Cloud Security - AWS, Azure, GCP security research
├── CTF Writeups - Capture The Flag solutions
└── Security Tools - Custom tools and scripts
This repository contains security research for educational and defensive purposes.
- Never publish sensitive customer data.
- Never publish exploitable PoCs against live targets without authorization.
- All research is conducted on systems I own or have explicit permission to test.
- Responsible disclosure practices are followed for all findings.
- Follow responsible disclosure timelines (90-day window).
- Redact any real customer data, tokens, or credentials.
- Include reproduction steps only after vendor patches are available.
- Credit vendors and collaborators where appropriate.
- Label severity using CVSS where applicable.
For security reports or collaboration: foeed@users.noreply.github.com
All rights reserved unless otherwise noted in subdirectories.