Sidebar profile

SANJOK

🏴‍☠️

SECURITY RESEARCHER

SYS_TIME:--:--:--
UPTIME:00:00:00
STATUS:ONLINE
VIEW:BLOG
▶NAVIGATION[7]
00Home./init
01About./bio
02Credentials./auth
03Achievements./pwn
04Blog
[ACTIVE]
05Library./read
06Contact./msg
THREAT_NOISELOW
COFFEE99%
FOCUS92%
SECURE_CONN

© 2026 @thesanjok

$ cat /var/log/exploits/*

TOTAL_POSTS:3
STATUS:ACTIVE
CATEGORY:SECURITY_RESEARCH

HTTP Request Smuggling Demystified: From RFC to Full Site Takeover

CRITICAL

> "In August 2025, James Kettle's latest research netted significant bug bounties in just two weeks, compromising tens of millions of websites. Request smuggling isn't dying—it's...

Aug 10, 2025
[25 min read]
HTTP SmugglingDesync AttacksWeb SecurityBug Bounty
ID: POST_001$ cat article.md

Dorking for Bug Bounty: Multi-Engine Reconnaissance & Automation

HIGH

> "The highest-leverage recon is usually not 'more tools' — it's better questions encoded as search queries. I've earned over $50,000 from dorking alone." Dorking is one of those...

May 17, 2025
[25 min read]
Bug BountyOSINTReconnaissanceGoogle DorksAutomation
ID: POST_002$ cat article.md

GraphQL Security Testing: Advanced Techniques & Real-World Exploits

HIGH

> "In 2023-2024, GraphQL vulnerabilities accounted for over $2.5M in bug bounty payouts across major platforms. The attack surface is massive, yet most testers still approach it...

Sep 20, 2024
[20 min read]
GraphQLAPI SecurityPentestingBug Bounty
ID: POST_003$ cat article.md

▶ More writeups coming soon...

[EOF]