Security Engineer and Tool Developer specializing in offensive security automation, vulnerability research, and custom reconnaissance pipelines.
I design and build specialized tools that automate complex workflows in penetration testing, network auditing, and vulnerability scanning. My security philosophy focuses on developer-first tools, combining clean static code analysis with robust automated scanner orchestration to identify flaws early.
Currently studying Digital Technology Innovation at Kasem Bundit University, I actively conduct independent vulnerability research and write utilities using Python, TypeScript, and Go. I am highly comfortable building automated cloud setups, custom Telegram administrators, proxy pipelines, and terminal utilities.
Enterprise vulnerability command-center for orchestrating Nuclei scanners. Features multi-node scanner scheduling, live findings reporting, AI template suggestions (via Groq API), and Shodan scanning integrations.
High-speed HTTP compliance scanner checking server configurations against OWASP web security standards. Validates CSP, HSTS, CORS, X-Frame-Options, and prints formatted CLI results.
SheerID identity verification automation pipeline for acquiring developer API access. Implements background task queues, proxy rotation, Telegram warnings, and custom TLS fingerprinting.
Static reconnaissance scanning helper (CLI & extension) built to parse client-side JS bundles. Discovers hidden API paths, unlinked API routing endpoints, and hardcoded secrets.
Interactive auditing utility for inspecting wireless captive portal authentication models. Audits DNS/DHCP leaks, tests bypass methods, and generates detailed PDF reports.
WireGuard configuration generator script and Telegram bot assisting in the deployment of secure, split-tunnel Cloudflare WARP client configurations across devices.
Interactive CLI utility and snippets bundle generating reverse-shell payloads across major networking protocols and programming languages (Bash, Python, Netcat, PowerShell, PHP, Ruby).
DevSecOps architectural guides, configuration parameters, and deployment templates optimized for securely deploying production workloads on free-tier cloud platforms (Vercel, Supabase, Cloudflare).
Automated security scanning framework built for REST and GraphQL APIs. Scans endpoint schemas, maps routes, and audits for IDOR flaws, query injection, and schema disclosure.