ABOUT

Security research,
grounded in evidence.

Independent security researcher focused on Android, mobile application, web, and API security.

My main interests include WebViews, deep links, native bridges, reverse engineering, client-side attack surfaces, web application security, API endpoints, authentication and authorization issues, and unexpected trust-boundary violations.

I enjoy analyzing how different application components interact, identifying weaknesses that arise between those boundaries, and turning findings into clear and reproducible proof-of-concepts. I prefer practical, hands-on vulnerability research and demonstrated real-world impact over purely theoretical findings.

Always interested in unusual attack surfaces, complex vulnerability chains, and understanding how applications behave beyond their intended design.

PUBLIC RECORD

Research you can read.

All write-ups →

Published work, with evidence and remediation context in each article.