fillsexploit

Control Systems Engineer @ UniPD

Web APIs and Vulnerability Research

Recent Security Research

Kena Mobile Winback Bypass

30 October 2025 • Fixed • Business Impact

Client-side validation bypass on Kena Mobile's winback campaign allowing unrestricted access to promotional offers.

View all posts →

About This Site

This site documents security research findings, vulnerability disclosures, and responsible security practices. All testing is performed ethically with proper authorization.

Focus areas: