A curated selection of my security findings, technical contributions, and hands-on work across application security, red teaming, and secure systems.
Real-world issues identified through manual testing and logic analysis.
Identified a business logic flaw where client-controlled pricing allowed users to complete valid purchases while paying a fraction of the intended cost.
Identified a business logic flaw where client-controlled pricing allowed users to complete valid purchases while paying a fraction of the intended cost.
Purpose-built tooling created to solve gaps in security workflows.
Built a custom Burp extension and companion browser automation to eliminate session expiry friction during authenticated testing, enabling continuous, hands-free JWT refresh across Burp tools while maintaining a valid user session in the browser.
Designed and solved challenges focused on exploitation and defense.
Led the end-to-end technical delivery of I&M Bank's Inter-university CTF, designing resilient infrastructure, implementing improvised high availability for CTFd, and authoring multiple DevSecOps-themed challenges for over 50 university participants.