# Joshua van der Poll

Pentester, HackIndex

## Profiles

- <https://github.com/joshuavanderpoll>

## Certifications

- **OffSec Certified Professional (OSCP)**: OffSec, since 2026-07-14, Credential ID: 3a44b7e6-4267-4789-bc41-e0a6de0651ea ([verify](https://credentials.offsec.com/3a44b7e6-4267-4789-bc41-e0a6de0651ea#acc.8hDcC5js))
- **OffSec Certified Professional Plus (OSCP+)**: OffSec, since 2026-07-14, valid until 2029-07-14, Credential ID: 5fcaa218-3011-4f79-b57e-013b17598df1 ([verify](https://credentials.offsec.com/5fcaa218-3011-4f79-b57e-013b17598df1#acc.MTpznVAY))

## Research by Joshua van der Poll

- [HI-SA-2026-003: Unsafe deserialization in statamic/importer](https://hackindex.nl/en/research/hi-sa-2026-003.md)
- [HI-SA-2026-002: Access control not enforced in ai-openrouter-gateway](https://hackindex.nl/en/research/hi-sa-2026-002.md)
- [HI-SA-2026-001: Stored XSS in parallax/filament-comments](https://hackindex.nl/en/research/hi-sa-2026-001.md)
- [HI-MA-2026-001: Hidden spyware and adware in the ModHeader browser extension](https://hackindex.nl/en/research/hi-ma-2026-001.md)