XSS to RCE - Xbox Device Portal
The Xbox Device Portal is an invaluable tool for developers, offering remote access to an Xbox console in developer mode via a web browser. It allows...
Welcome, I'm Ash King
I'm a
Web Developer
Uncovering security risks where others see features. Expertise in ethical hacking, application security, and building resilient software.
Security Blog
Recent discoveries and technical writeups
Bountycon 2022 - Android Trinity PWN
Whilst working on the BountyCon 2022 CTF, I spent the majority of the time focusing on the Android Trinity challenge. This was one of two PWN...
Disclosing BCC Recipients of an email
This post will cover an interesting logic flaw found in a private bug bounty program. Whilst the name of this company will be known as...
Companies I've Helped Secure
Vulnerabilities discovered and reported to strengthen security postures
Meta
Many reports since 2018
Apple
Shazam Android Vulnerability
Microsoft
Including Teams, DevOps & Xbox
Android Vulnerabilities
PayPal
Android Vulnerabilities
Uber
No disclosure on vulnerabilities
Many more
Many prefer no disclosure
Availability
I'm available for web, API and Android application penetration testing, bug bounty engagements, live hacking events, and other security-related projects.
Whether you're securing your digital assets, testing for vulnerabilities, or need an expert eye on your system’s defenses, I’m here to help.
Get in touch to collaborate on securing the digital world!
Recent Events
Security conferences and hackathons I've attended
HackerOne 4420
I attended the first ever live hacking event in London. It was an incredible experience collaborating with other security researchers on finding vulnerabilities in real-time.
POST COMING SOON!
HackerOne 702
This event took place in Las Vegas with high-profile clients. A unique opportunity to test my skills against complex security challenges.
POST COMING SOON!Interested in inviting me to your event?
I'm always looking for new challenges and opportunities to share my knowledge with the security community. If you're hosting an event or know someone who is, I'd love to hear from you.
Get in TouchGet In Touch
Questions, feedback, or work inquiries? I'd love to hear from you.
Let's Work Together
Whether you need help with security testing, vulnerability assessment, or secure development practices, I'm here to help. I'm particularly interested in challenging projects that push the boundaries of web and mobile security.
Twitter
AshleyKingUK
AshleyKingUK
Email
contact@ash-king.co.uk
contact@ash-king.co.uk
LinkedIn
AshkingUK
AshkingUK
Location
Gosport, United Kingdom
Gosport, United Kingdom