Independent software and security engineer · Germany

I engineer dependable and secure products and cloud systems.

Simplicity over complexity.
Quality over quantity.
Function over form.

Profile

Focus

Full-stack systems from first sketch to production.

Automations and integrations, web applications, cloud solutions and IaC with AWS.

Background

Software engineer with an offensive security foundation.

Former red teamer, pentester and security engineer at Deutsche Telekom. AWS certified, OSWE, and OSCP.

Stack

Go, Elixir, JavaScript, SQL

Proven and robust technologies for dependable systems.

Latest Open Source

GitHub profile ↗

Side Projects

Latest Writing

All posts →

./ai

Read →

Improved validation with generics in Go

Read →

tevents: event logger and job monitor for tailnets

Read →

Queueing with PostgreSQL and Go

Read →

hntr, shareable workspaces for target data

Read →

Push to deploy a Python (Django) service via Github Actions

Read →

Smuggling HTTP headers through reverse proxies

Read →

Bug Bounty: Bypassing a crappy WAF to exploit a blind SQL injection

Read →

Re-using socket FDs vs reverse shell

Read →

Django Vue.js integration as a widget

Read →