whoami

Welcome. This is a personal blog for ethical hacking and security research — write-ups, notes, and tooling from authorized testing, CTFs, and lab work.

Everything here is published for education and authorized testing only. Don't point any of it at systems you don't own or don't have explicit written permission to test.

topics

• web app security (injection, auth bypass, SSRF, deserialization)
• network recon and enumeration
• exploit development and reverse engineering
• tooling, automation, and home-lab setups