Enfoque

Principios de trabajo

Four principles. Every tool here came out of one of them.

01
Build first, then break
The only way to truly understand a vulnerability is to construct the system it lives in. Most entries here were born from rebuilding a target in order to understand an attack against it.
02
Data stays with its owner
6 of the tools transmit nothing to the server — files never leave the browser. This is not a feature; it is the default position. Sending data to a server requires a convincing reason.
03
Run your own infrastructure
Everything runs on our own hardware. Understanding a system’s security without operating it is like describing an aircraft without flying. Outages, patches and on-call nights are part of the learning.
04
Show the evidence, not the claim
We would rather open an instrument than describe it. A working system is more persuasive than the best-written paragraph.

Disciplinas

For research collaboration, vulnerability disclosure, or an engagement: write. Usually answered within 24 hours. Disclosure reports take priority.