On HackerOne, I investigate public programs across fintech, crypto, and enterprise SaaS, taking findings from reconnaissance through demonstrated impact. Tucows fixed my Medium-severity Host-header injection report, and I confirmed the fix with a retest; PagerDuty triaged another finding.
My work focuses on combining low-severity weaknesses into full compromise. In TryHackMe challenges, I have chained techniques across web applications, Linux, Active Directory, AWS, and binary exploitation, completing 111 challenges up to insane difficulty.
I maintain a written methodology of more than 130 attack techniques and build Python tools for bot-protected recon, JavaScript bundle mining, traffic capture, and multi-step flow testing. I hold the TryHackMe PT1 certification, scored 946/1000, and write reports with reproducible proof of concept, severity scoring, and layered remediation.
