This post along with the link on that profile acts as confirmation of ownership for infosec.exchange/@ndevtk

Bug write-up for "Google XSS part 2" :) ndevtk.github.io/writeups/2024/…

Bug write-up for "EqualWeb UXSS" ndevtk.github.io/writeups/2025/… I prefer Google VRP.

My NEW favorite popunder!

Bug write-up for "Nuance Library XSS" ndevtk.github.io/writeups/2025/… 🦆

Testing the new Chrome ai.summarizer API for the summarizer theme on ndevtk.github.io/writeups/ its patched so that COOP isn't "Connection Orca Protection" but still unreliable.

It appears with Gemini 2.5 pro creating an LLM wiki for chromium security research is a lot more practical. Does anyone want to collaborate on this? github.com/ndevtk/chromiu… in return you may find a bug! Otherwise I will go back to the random post about XSS system.

Generic fixed postMessage XSS on OKX cryptocurrency exchange youtu.be/Se463wvub64

Quack Quack Quack my legacy Minecraft mod is now open source github.com/NDevTK/MCMod/ I still don't know Java just search for "intent://" URLs. 🦆

Decided to skip testing and deploy the following: chromewebstore.google.com/detail/postlog… the console.log now has a space :) chromewebstore.google.com/detail/request… Shortcut partitioning, a threat model I made up. chromewebstore.google.com/detail/autopau… added a feature to ask for permission... API just crashes 🦆

Used an LLM to create extra themes for ndevtk.github.io/writeups/ I noticed the base64 theme was to easy to read so there's now a emoji option which further encodes the output.

Bug write-up for "Android lock screen data leak" ndevtk.github.io/writeups/2025/… ╰(*°▽°*)╯

¯\_(ツ)_/¯

OriginMarker (Origin dependent marker) version 1.4 chrome extension is released chrome.google.com/webstore/detai… now with pre-set Markers for common websites github.com/NDevTK/OriginM… strangely not given up with the extension yet.