Skip to main content
Moein Abbas, Founder & Lead Penetration Tester at codéjà Vu
Leadership & Security Delivery

Moein Abbas

@mosec

Founder & Lead Penetration Tester

Founder of codéjà Vu. Security researcher with 15+ years in information technology and cybersecurity. Has identified and responsibly disclosed critical vulnerabilities across Fortune 50 companies and major technology organizations worldwide.

Penetration TestingVulnerability ResearchApplication SecurityClient Delivery
HackerOneFacebook
Public research record

Selected research acknowledgements

Published work

Research by Moein Abbas

IN-DEPTH RESEARCH
4 min readOne-Click ATO: The Reset That Trusted the Client

An unauthenticated recovery call let me choose where a genuine reset email sent its recipient. One click carried the recovery token to the wrong host.

September 18, 2026Open case study
IN-DEPTH RESEARCH
5 min readCRLF to Account Takeover: Chaining Three Bugs

A rejected response-splitting report became a High-severity account-takeover chain when a shared-domain cookie, a cookie-based XSS, and browser autocomplete were connected.

July 16, 2022Open case study
IN-DEPTH RESEARCH
5 min readHow I Hacked Thousands of Subdomains

A subdomain-takeover workflow everyone considered closed, one missing server-side validation, and the curiosity that turned a single strange response into thousands of historical findings.

January 25, 2022Open case study