I research and document vulnerabilities in web applications and CTF challenges — mostly access control issues, injection flaws, and logic bugs that slip past automated scanners. Every writeup here follows the same standard: a clear root cause, a reproducible proof of concept, and a concrete fix.
All findings are tested against local development environments or disclosed responsibly through proper channels before being published. Synthetic data is used wherever a live target is involved.
Get in touch: you@example.com