$ whoami
victor — red teamer, security researcher, builder of small sharp tools
$ cat ~/.focus
[*] red team ops › adversary simulation end to end — recon, initial
access, post-exploitation, and the quiet parts
in between
[*] web security › auth and session flows, broken access control,
injection, and the logic bugs no scanner finds
[*] reverse engineering › unpacking, deobfuscating, and reading binaries
that would rather not be read
[*] mobile security › TLS pinning & root detection bypass, runtime
instrumentation with Frida
[*] tool development › utilities that turn a three-hour assessment
into a three-minute one
$ cat ~/.philosophy
"You don't really understand a system until you've watched it fail."Languages
Web & Red Team
Reversing & Mobile
Platforms & Build
| 🔍 Start at the edges | The interesting bugs live where two systems disagree about what the data means. |
| 🔗 Chain, don't collect | Three mediums that chain into domain admin beat one critical nobody acts on. |
| 🧩 Read the code, not the docs | Documentation describes intent. The binary describes behavior. |
| ⚡ Automate the second time | If I do it twice by hand, it becomes a tool. |
| 🛡️ Break, then fix | Every bypass I write becomes a hardening note for the defenders. |