Full Stack Engineer moving into red teaming. I’ve built production systems — now I’m learning to break them.
Shipping authentication, APIs, device networks, and deploys showed me where real systems crack. I’m turning that builder’s view into offensive security: web and API exploitation, Linux and network attacks, and lab work written up honestly.
now rad labs · full stack · learning offensive security
Scales, printers, and Raspberry Pi stations writing inventory with station tokens, plant isolation, and offline sync.
Where it could break: a cloned device, a stolen token, a replayed offline event.
A public form product. A ransomware bot got into its internet-facing Postgres through default credentials, and I hardened the box afterwards.
Where it broke: an open port and a default password. No exploit was needed.
An experimental OpenID Connect provider built with Bun, to understand the identity flow from the inside.
Where it could break: redirect URIs, token handling, a state or nonce that isn’t checked.
Full Stack Engineer / Project Lead: building a healthcare mobile app from the ground up.
Full Stack Engineer: production ERP workflows with device integrations.
Full Stack Developer: full-stack features in a healthcare product.
Full Stack Developer: web application features across the stack.
Added 56 Mailchimp Marketing API endpoints and 4 webhook triggers to corsairdev/corsair, with OAuth 2.0 and API-key auth, webhook-secret validation, multi-tenant routing, and 56 unit tests.
Shipping auth flows, APIs, and deploys is how I learned where they get misconfigured.
A device token, a webhook URL, and a database port are all doors. Know which ones are open.
My own database was breached through a default password, not a clever exploit.
Shipped, practiced in labs, or learning. Never blurred together.
A ransomware bot found a public database. How the attack worked, and what changed after.
How factory devices prove who they are, and how an attacker would try to fake it.
Forged callbacks and tenant confusion, and the checks that stop them.