Architected an asynchronous web reconnaissance framework. Transitioned from synchronous I/O to a concurrent engine to streamline target profiling and reduce average network scan times.
Developed a custom automated tool to perform initial reconnaissance and detect common vulnerabilities across the attack surface of target web applications.
Built an OSINT tool to systematically discover valid subdomains for a target domain, effectively mapping out hidden infrastructure and expanding the testing scope.
A comprehensive log of writeups, exploit scripts, and methodologies developed while solving advanced web vulnerabilities in the PortSwigger Web Security Academy.