Independent software and security engineer · Germany

I engineer dependable products and cloud systems.
I advise teams on IT security.

Simplicity over complexity.
Quality over quantity.
Function over form.

Profile

Focus

Full-stack systems from first sketch to production.

Automations and integrations, web applications, cloud solutions and IaC with AWS.

AWS certified

Background

Software engineer with an offensive security foundation.

15+ years of experience in software and security engineering. Former red teamer, pentester and security engineer at Deutsche Telekom.

OSWE, OSCP certified

Stack

Go, Elixir, JavaScript, SQL

Proven and robust technologies for dependable systems.

Latest Open Source

GitHub profile ↗

Side Projects

Latest Writing

All posts →

./ai

Read →

Improved validation with generics in Go

Read →

tevents: event logger and job monitor for tailnets

Read →

Queueing with PostgreSQL and Go

Read →

hntr, shareable workspaces for target data

Read →

Push to deploy a Python (Django) service via Github Actions

Read →

Smuggling HTTP headers through reverse proxies

Read →

Bug Bounty: Bypassing a crappy WAF to exploit a blind SQL injection

Read →

Re-using socket FDs vs reverse shell

Read →

Django Vue.js integration as a widget

Read →