// 03 — Proof of work
Tools, tradecraft & case studies.
Public CVEs and academic publications — the work that's cleared for public release. Engagement-bound work lives in the CV, under references on request.
01 / Selected work
Projects and research with proof-of-work energy.
Click any tile for the full case study.
CVE-2024-44851 — Perfex CRM
Stored Cross-Site Scripting in the File Sharing module of Perfex CRM.
CVE-2024-46638 — HelpDeskZ
Stored Cross-Site Scripting in HelpDeskZ v2.0.2.
Faking Smart Industry — Honeypot Research
A honeypot-driven approach for exploring the cyber security threat landscape of smart-industry environments. Best Paper at EAI WICON 2021.
IoT Air Quality & Weather Monitoring
An IoT-based air-quality and weather-monitoring system with a companion Android application. First-author publication at ICISET 2022.
Risk-Based MITRE TTP Scoring
A risk-based scoring approach to MITRE TTPs for proactive cyber-threat prioritization and response. ICSCA 2025.
Securing Agentic AI
An overview of threats, risks, and mitigation strategies for agentic AI systems.
// Engagement-bound work