whoami

Taking things apart

As a kid, I liked taking things apart to understand how they worked. Putting them back together was less of a success. I’ve always been curious and wanted to try a bit of everything.

Why security research

I started in software development and DevOps before moving into offensive security. After years spent mostly on the same project, I realised I wanted more variety. Bug hunting keeps bringing new challenges: different technologies, unfamiliar applications, and different people to learn from. There’s always something new to understand, and that constant learning is what I enjoy most about it.

I also spent a year as a SOC analyst, bringing an offensive perspective to purple teaming and helping build detection rules.

My hunter squad

I hunt bugs on the side, alongside my day job. Most of my bug bounty hunting is with this incredibly talented hunter squad: truff, icare, supr4s, and jtof_fap.

We push each other to go further. Talking through ideas and brainstorming together often leads us to bugs we’re really excited about. Car rides with icare are particularly good brainstorming sessions.

Trying things with AI

My first hands-on experience with AI was during my first internship in 2018. I was part of a team building and training a chatbot. We didn’t have much training data, and the results weren’t exactly impressive, but it was a start for us.

Since 2022, I’ve been a heavy user of AI tools. I tend to try new ones early, and I try just about everything I can get my hands on. It’s another way that curiosity shows up: I want to see what these tools can actually do.

What I share here

This blog is a place for that work: research I can share, notes from the process, and things I build along the way.

Here for the unintended features.