Hey.

I’m a penetration tester who builds things and breaks them. Sometimes in that order. I learn best by getting my hands dirty - if I don’t understand how something works, I’ll tear it apart until I do.

This site is where I document the stuff I figure out along the way. Hopefully some of it saves you time or points you in the right direction.


Latest Posts

2026-11-10 Blind SQL Injection in SuiteCRM Reports, Through ORDER BY
2026-10-07 Abliterated Models for Web App Bug Bounty Hunting
2026-08-20 Modern Web App Testing: JWT Abuse, GraphQL, Race Conditions, and Prototype Pollution
2026-08-19 Automating Android App Analysis with Frida and Objection
2026-03-02 Attacking Android IPC: Intents, Content Providers, and Broadcast Receivers

→ All posts


What’s Here

Blog - Walkthroughs, research, and the occasional deep dive into mobile security, hardware hacking, and whatever else catches my attention.

Stuff I Look Up - A collection of tools, references, and resources I actually use. Updated when I find something worth adding.


Currently

Working through Android application security - SSL pinning bypasses, Frida hooking, native library analysis. The mobile attack surface is wild and most apps are barely trying.