# Joshua van der Poll

Pentester, HackIndex

## Profielen

- <https://github.com/joshuavanderpoll>

## Certificeringen

- **OffSec Certified Professional (OSCP)**: OffSec, sinds 2026-07-14, Credential-ID: 3a44b7e6-4267-4789-bc41-e0a6de0651ea ([verify](https://credentials.offsec.com/3a44b7e6-4267-4789-bc41-e0a6de0651ea#acc.8hDcC5js))
- **OffSec Certified Professional Plus (OSCP+)**: OffSec, sinds 2026-07-14, geldig tot 2029-07-14, Credential-ID: 5fcaa218-3011-4f79-b57e-013b17598df1 ([verify](https://credentials.offsec.com/5fcaa218-3011-4f79-b57e-013b17598df1#acc.MTpznVAY))

## Research van Joshua van der Poll

- [HI-SA-2026-003: Onveilige deserialisatie in statamic/importer](https://hackindex.nl/research/hi-sa-2026-003.md)
- [HI-SA-2026-002: Toegangscontrole wordt niet afgedwongen in ai-openrouter-gateway](https://hackindex.nl/research/hi-sa-2026-002.md)
- [HI-SA-2026-001: Stored XSS in parallax/filament-comments](https://hackindex.nl/research/hi-sa-2026-001.md)
- [HI-MA-2026-001: Verborgen spyware en adware in de browserextensie ModHeader](https://hackindex.nl/research/hi-ma-2026-001.md)