Santos Gallegos

Did you know you can easily search for commits that fix security issues on GitHub?

In this post I'm going to share how I exploited a bad implementation of OAuth2 to take over user accounts with a single click.

This post details two cross-site scripting (XSS) vulnerabilities I discovered in django-impersonate, and django-gravatar2.

This post details a Cross-Site Scripting (XSS) vulnerability I discovered in django-allauth, a popular Django package for authentication.

Advent of Code is a series of programming puzzles that are released every day in December up to Christmas.

If you are a developer, chances are that you handle private code or production secrets.

Hi friend, today I'm going to tell you a little story.

Last year I participated in the Devsu Codejam 2019 contest, which is about solving programming problems.

If you work in a project with more than one file, probably you'll be changing files very frequently or search for a file that contains the code or text you are interested in.

When we write software, people tell us to write docs for it.