Skip to content

LARPResearch
Team

back to the team

Member 04

@ilov3c4ndy

ilov3c4ndy

bug bounty

write-ups: 4
advisories: 0
critical: 0

CTF player and bug bounty hunter. Works on web applications and open-source software, with a strong interest in low-level systems and web3 security.

focus: Bug bounty on web applications, open-source frameworks and web3.
links

Write-ups

LARP-2026-019
07 Nov 2026
A widget ID dropped unescaped into a generated script
4 min read
web
LARP-2026-016
23 Oct 2026
Reading SSRF responses back through a resume parser
12 min read
web
LARP-2026-014
16 Oct 2026
Four chat adapters that send their bot token to any attachment URL
5 min read
open-source
LARP-2026-013
09 Oct 2026
DOM XSS through a textContent sanitizer that decodes entities
4 min read
web

Advisories

No public advisories yet.