Thomas Orlita
Making and breaking software
Posts
What I want to want
HTTP header easter egg
DIY air conditioning in student accommodation
A guy with a rifle in my hotel room
The Too Good To Go experiment
chrome://crash is the best home page
view all posts
→
Projects
Street View Download 360
CrFuzz
img.onl
City Traffic Simulator
Realtime Collaborative Board
view all projects
→
Web security
5 different vulnerabilities in Google’s Threadit
Clickjacking DOM XSS on Google.org
XSSing Google employees: blind XSS on googleplex.com
Inserting arbitrary files into anyone’s Google Earth Studio projects archive
Bypassing Firebase authorization to create custom app.goo.gl subdomains
view all posts
→
Contact
info@thomasorlita.com
LinkedIn
GitHub