4pptester — Security Research

4pptester

Independent security research & bug bounty hunting

~/ security-research

$ whoami

security researcher // bug bounty hunter

$ cat focus.txt

web application security

XSS · sanitizer bypasses · CSP evasion

stored injection chains · mXSS

$ cat platforms.txt

HackerOne · Bugcrowd · Intigriti

// Focus areas

</>

XSS & Injection

Stored, reflected, DOM-based. Sanitizer and parser differentials.

{}

CSP Bypass

Nonce prediction, policy misconfigurations, script gadgets.

mXSS

Mutation-based attacks through HTML serialization mismatches.

Email Security

SMTP injection, HTML email rendering, stored payloads via email intake.