I map exposed systems, trace trust boundaries, and turn security research into reproducible tooling.
Attack Surface · Identity & Access · Adversarial Validation · Automation
- Mapping external attack surfaces across DNS, services, and exposed interfaces.
- Following authentication, authorization, and trust relationships to reachable impact.
- Building compact Go and Python tooling for repeatable validation and clear evidence.
nacos3-scopehole · Go
Verification tooling for Nacos 3.x authorization-scope issues in approved test environments.
DNS-batch-query · Python
Batch DNS record collection with selectable resolvers and record types for attack-surface mapping.
Go · Python · Bash · Linux · Git
Scope first. Evidence always.
