What-Security
rob@what-security ~ $ whoami --verbose

Robbie
Wiggins

Finding Security Holes Everywhere ¯\_(ツ)_/¯ Bug bounty hunter and vulnerability researcher — disclosed findings to Apple, Google, AT&T, Dell and more. If my domain shows up in your logs, that's legitimate security research.

cat cli-tips.txt
17
disclosures
17
halls of fame
10
years hunting
2016
since
rob@what-security: ~ — terminal
rob@what-security ~ $
type a command and press [ENTER] · try: help whoami ls theme gruvbox
media page.

TechCrunch

Hotel giant Wyndham exposed customer data after app security lapse

A password hardcoded in the Wyndham Android app opened an internal Salesforce database holding customer names, email addresses, rewards member numbers and login tokens, with millions of entries.

Nov 2026

 TechCrunch

Applebee's exposed customers' personal data after leaving database password in app

A hardcoded database password in the Android app gave access to an internal customer database holding names, emails, dates of birth, phone numbers, ZIP codes and veteran status.

Oct 2026

 BleepingComputer

Honda India left details of 50,000 customers exposed on an AWS S3 server

2019-04

 ZDNet

Jira bug exposed private server keys at major companies, researcher finds

Aug 2019