Offensive Security · Penetration Testing · Vulnerability Research
I find the holes before the adversaries do. Specializing in web application security, network penetration testing, and exploit development with a decade of experience breaking things responsibly.
I'm a security researcher and penetration tester with a passion for understanding how systems break. My work spans web application security, binary exploitation, and cloud infrastructure assessments.
I've worked with Fortune 500 companies, startups, and government entities to identify and remediate critical vulnerabilities before malicious actors can exploit them.
When I'm not breaking things professionally, I'm competing in CTF competitions, contributing to open-source security tooling, and writing detailed exploit research.
A breakdown of the tools and techniques I work with daily across offensive and defensive security disciplines.
Original vulnerability research, open-source tools, and client engagements I'm cleared to disclose.
Discovered a critical pre-auth remote code execution vulnerability affecting 2M+ WordPress installations. Full exploit chain via deserialization gadget in the plugin's REST API endpoint.
A fast, parallel Kubernetes attack surface enumeration tool that identifies misconfigurations, exposed secrets, privileged pods, and lateral movement paths across clusters.
Systematic analysis of OAuth 2.0 implementation flaws across 50 enterprise SaaS products, resulting in 12 disclosed vulnerabilities and $42,000 in bug bounty rewards.
Selected challenge solutions from Hack The Box, TryHackMe, and competitive CTF events. Full writeups on my blog.
| Challenge | Platform | Category | Difficulty | Points | Write-up |
|---|---|---|---|---|---|
| Cerberus | Hack The Box | Linux / AD | Hard | 40 | Read |
| Office | Hack The Box | Windows / AD | Hard | 40 | Read |
| Heap Overflow 101 | picoCTF 2024 | Binary Exploit | Medium | 300 | Read |
| JWT Juggling | DEFCON CTF Quals | Web | Insane | 500 | Read |
| Forgotten Flags | TryHackMe | OSINT | Easy | 100 | Read |
| Rust Lockbox | CSAW CTF | Reverse Eng. | Medium | 250 | Read |
Industry certifications validating offensive and defensive security expertise.
I'm available for penetration testing engagements, red team exercises, vulnerability research partnerships, and speaking opportunities. All inquiries are treated with confidentiality.