Jeroen Gui
Cybersecurity Professional
I find vulnerabilities, take down phishing at scale, and build security tooling. Studying Computer Science & Information Management at KU Leuven. Based in Belgium.
How LookyLoo's document capture mode bypassed its own SSRF protections, and how the fix uses Playwright route handlers to filter secondary requests.
A look at how an incomplete fix from 2019 left MISP's auth key reset endpoint vulnerable to privilege escalation, and what the patch looks like.
How I found and reported a blind SQL injection in MISP's event and shadow attribute listing endpoints through unsanitized ordering parameters.