Aaron Bishop

Senior Principal Penetration Tester

About

Blog Posts by this author

Hand holding a phone showing an eye icon, with text Mobile Pen Testing 101 on left side.

Mobile Pen Testing 101

Stack of three report pages titled 'CVE Disclosure' with blue circuit-like lines background.

Blogengine.net Directory Traversal & Listing; Login Page Unvalidated Redirect

Stack of report pages titled ‘REPORT CVE Disclosure’ with circuit-like blue lines in background.

Authorization Bypass: CVE (2020-11679, 2020-11680, 2020-11681)

Stack of documents with a cover titled REPORT CVE Disclosure on a tech-themed background.

BlogEngine.NET Directory Traversal + Remote Code execution

Stack of blue-outlined reports titled CVE Disclosure on a light background with circuit lines.

BlogEngine.NET XML External Entity Attacks

Stack of report papers titled CVE Disclosure with circuit board design background.

Something from Nothing; a Pentest Story

Illustration of a report titled 'CVE Disclosure' with pages and digital circuit lines background.

Where Did that Request Come From? CVE-2020-11682 (CSRF)

Stack of report documents with the cover titled 'REPORT CVE Disclosure' in blue text.

WiKID 2FA Enterprise Server Cross-Site Scripting

Three stacked report documents titled REPORT CVE Disclosure with digital circuit lines in the background.

Zyxel Devices Vulnerable to Cross-Site Scripting on Login page

Stack of report documents with the top one titled REPORT CVE Disclosure in blue text.

WiKID Systems 2FA Enterprise Server SQL injection

Stack of documents with the cover titled REPORT CVE Disclosure in blue text and lines.

WiKID Systems 2FA Enterprise Server CSRF

Stack of three white report documents with blue outlines titled 'REPORT CVE Disclosure'.

CVE-2020-5497 - MITREid Connect Cross-site Scripting

Other Content by this author