Member 03
@yuzu
web
- write-ups
- 4
- advisories
- 2
- critical
- 1
Breaks authentication and anything that fetches a URL on your behalf. Good at turning three low severity bugs into one critical.
Write-ups
- LARP-2026-01202 Sep 2026web
SSRF through PDF rendering in a document preview service - LARP-2025-01922 Jun 2025web
From prototype pollution to RCE in a Node.js template engine - LARP-2024-02230 Nov 2024tooling
Releasing our file parser fuzzer - LARP-2024-00702 Apr 2024notes
Our first year: 31 bugs, 4 lessons, 1 apology
Advisories
Achievements
- 2026[achievement]