// available for projects
I build tools that
actually work.
penetration testing, CLI utilities and security tooling.
// featured projects
❯ clifmt --color --lang go main.go
package main
import "fmt"
func main() {
fmt.Println("hello")
}
asciinema · 2:31
portscanner
portscanner
recording
Async port scanner with service detection, banner grabbing, and structured JSON output. Built in …
// latest transmissions
-
Exploiting SSRF in a modern cloud environment
Chaining SSRF with a metadata service misconfiguration to exfiltrate IAM credentials during a pentest.
2 min read -
Building a zero-dep CLI arg parser in Go
Design of a minimal, composable argument parser — no cobra, no viper, no surprises.
2 min read -
HTB — reversing a custom VM in 3 hours
Full breakdown of the 'VM-ware' HackTheBox challenge: opcode table, emulator, exploit chain.
2 min read -
Why I ported my TUI tools from C to Zig
Comptime, build ergonomics, and no hidden allocations. The migration that was actually worth it.
2 min read