Bug Bounty Portfolio Ethical Vulnerability Research
A curated collection of responsible vulnerability disclosures made by Sanctus Solutions. Ethical vulnerability disclosures. Real threats. Responsible action.
About the Researcher
Brennan Bosco is a cybersecurity analyst and ethical hacker with hands-on experience identifying real-world vulnerabilities—from misconfigured web servers to exposed plugins and authentication flaws. He is trained through NGT Academy and certified in both red and blue team operations.
Professional Approach
Ethical Testing
No exploitation, no shortcuts—just verified insights
Responsible Disclosure
Clear communication and public service mission
Red & Blue Team
NGT Academy certified in offensive and defensive operations
Vulnerability Disclosures
Case Study: Sensitive Log File Exposure & Outdated PHP
Vulnerability Summary
During a responsible security audit of a live WordPress installation, Sanctus Solutions identified
a publicly accessible debug.log file
within the /wp-content/ directory.
Critical Finding: 52GB log file with byte-range access
The server was also running PHP 7.4.33, which reached end-of-life in 2022, increasing the site's vulnerability to known exploits.
Risks Identified
- Potential leakage of plugin info and error logs
- Server file paths and user data exposure
- Risk of targeted scraping or automated recon
- Server fingerprinting through exposed headers
Recommendations Provided
- Disable WP_DEBUG_LOG in production
- Remove or restrict access to debug.log file
- Upgrade PHP to supported version (8.2+)
- Turn off expose_php directive
Technical Verification Methods
Technical Assessment Methods
Non-Intrusive Testing
Responsible testing without exploitation or system damage
Command-Line Verification
Using curl and other tools for confirmation testing
Browser Testing
In-browser access testing for user-facing vulnerabilities
Header Analysis
Server response header examination and fingerprinting
Risk Categories Identified
Data Exposure
Sensitive log files accessible without authentication, revealing system information and user data.
Information Disclosure
Server version information exposed through headers, enabling targeted attacks.
Security Misconfiguration
Debug logging enabled in production environments, creating unnecessary security risks.
Outdated Software
End-of-life PHP versions and outdated components with known vulnerabilities.
Our Mission in Cybersecurity
Sanctus Solutions operates at the intersection of security and ethics, helping businesses take meaningful action to secure their digital infrastructure through responsible disclosure and expert guidance.
Integrity-Based
No exploitation, no shortcuts—verified insights supporting system safety
Proactive Protection
Staying ahead of evolving threats through offensive-defensive balance
Public Service
Mission-driven approach to protecting organizations and communities
Ready to Secure Your Digital Infrastructure?
Let our experienced team identify vulnerabilities before attackers do. Get a comprehensive security assessment with actionable recommendations.
Serving businesses nationwide with specialized Dallas-Fort Worth support
