Web development and application security

I find, explain, and help prevent vulnerabilities in web applications

I'm a penetration tester with a background in web development. I specialize in finding and fixing vulnerabilities before malicious actors can.

For small teams

Security review

Apply for a focused manual review and receive a practical report with verified findings and remediation guidance.

View the offer →

Research and write-ups

Technical work

Read detailed explanations of web vulnerabilities, exploit chains, request handling, and business-logic flaws.

Read the write-ups →

Learning by building

Projects

Explore the software and security-focused tools I’m building to understand web systems at a deeper level.

View the projects →

Recent technical work

View all posts →

Completed

Hash cracker Completed

A multiprocessing Python wordlist cracker supporting multiple hashlib algorithms and optional prefix or suffix salts.

#Python#Multiprocessing#Hashing#CLI

Under construction

Python OSINT CLI tool In-development

An early Python OSINT utility that retrieves a public webpage, extracts readable text, and identifies email-address and phone-number patterns.

#Python#OSINT#Web scraping#Regular expressions

Subdomain enumerator CLI tool In-development

A concurrent Python CLI that discovers candidate subdomains through DNS resolution, probes their HTTP services, and performs lightweight technology fingerprinting.

#Python#DNS#HTTP#Reconnaissance#Concurrency

Port scanner In-development

A multithreaded TCP connect scanner written in Python to explore sockets, concurrency, port ranges, and basic service identification.

#Python#Networking#Sockets#Concurrency