Web application pentester who finds what scanners miss. I dig into authentication flows, business logic, and API trust boundaries — the places where real vulnerabilities hide.
I don't stop at the CVE. I trace the full impact, build the PoCs, and document what it takes to fix it right.
$ echo "Authorized targets only. No exceptions." >> /etc/rules.conf
<?php
$tryhackme = [
'🏆 rank' => 'Top 1%',
'🗓️ streak' => '180+ Days',
'🎖️ rooms' => '230+ Completed',
];section .skills
; === Web Application Pentesting ===
recon equ "Subdomain enum & attack surface mapping"
authn db "OAuth / JWT bypass", 0
inject db "SQLi, XXE, SSTI, Command Injection", 0
logic db "Business logic & access control flaws", 0
client db "XSS, CSRF, Clickjacking, CORS", 0
api db "REST, GraphQL, WebSockets", 0
; === API Security Testing ===
bola db "Broken Object Level Auth (BOLA/IDOR)", 0
jwt db "JWT attacks: weak secrets, alg confusion", 0
exposure db "API key & token exposure in client-side code", 0
mov eax, learning ; Rate limiting bypass, GraphQL attacks, WAF Bypass, Code Review
section .text
global _start
_start:
mov eax, 1 ; sys_exit
mov ebx, 0 ; status: skills loaded
int 0x80
// The best defense is built on a complete understanding of the offense.