My **best project** and **Author’s pick** — an on-prem **Agentic AI** platform for authorized **Web and API** penetration testing. Sense, decide, and prove with live tests; only **Evidence** becomes Confirmed.
Read more →Tag
Web Security
3 items across research, projects, awards, and talks.
Practical playbook for Email Address Manipulation — equivalence quirks, validation bypass, header/parser gaps, and staged Probe → Observe → Encode → Exploit testing, with the companion EAMG payload generator.
Read more →Practical IPv6-based SSRF techniques, real-world payloads, and testing notes for penetration testers and bug bounty hunters — where IPv4-only filters fail.
Read more →Browse sections: Research · Projects · Award · Discoveries and Talk