Stealing.info
GhostA security researcher's blog recounting real-world vulnerability discoveries, including bypassing referer checks on a conference streaming site, leaking Discord user data via a local RPC API, and harvesting exposed environment variables from websites. Each post walks through the discovery process, impact and how the flaws were exploited in a responsible-disclosure style narrative.