Member 03
@F4XD
Fouad Mecelti
red team
- write-ups
- 4
- advisories
- 0
- critical
- 0
Penetration tester and red teamer, and a bug hunter on the side. Works mostly on web applications. CRTA and PT1 certified.
Write-ups
- LARP-2026-01115 Sep 2026
A dead server in the SPF record that passes DMARC for a subdomain - LARP-2026-00509 Jun 2026web
A public anon key with open signup into an internal expenses database - LARP-2026-00214 Apr 2026ai
An anonymous support chatbot that read internal articles to anyone - LARP-2025-00121 Oct 2025web
An unauthenticated API that decides where parents log in
Advisories
- No public advisories yet.