[01] OFFENSIVE SECURITY
Recon, web app testing and CTF challenges. Learning by breaking things in lab environments — and documenting every step so the lesson sticks.
royal@sec:~$ cat bio.txt
royal
builder, breaker, lifelong tinkerer. i pull systems apart — binaries, web apps, my own dotfiles — to understand how they hold together, then write down what i learn.
currently focused on: offensive security & tooling
CORE DOMAINS
[02] SYSTEMS & TOOLING
Small scripts and CLIs that remove repetitive work. Linux-first, terminal-native, built to still be readable six months from now.
[03] WEB CRAFT
Interfaces with intent — semantic HTML, fast CSS and just enough JavaScript. Building things that feel good to use, not just to look at.
SELECTED PROJECTS
- [01] recon-kit A tidy recon workflow that turns a domain into a readable report. Bash, ffuf, httpx.
- [02] dotfiles A fast, terminal-first Linux setup — zsh, kitty, i3 and a lot of small opinions.
- [03] home-lab Self-hosted DNS, dashboards and notes behind a reverse proxy. Built to be broken and rebuilt.
- [04] ctf-notes Write-ups from boxes and challenges, kept public so past-me can help future-me.
RECENT WRITING
Unpacking a packed binary with nothing but gdb #reversing
Most packers give themselves away at the entry point. Break on the first jump, dump the section that lights up, and rebuild it. Notes from doing the whole thing in a terminal.
SSRF is just a confused proxy #websec
The server trusts its own network more than it trusts you. Map which internal hosts answer, then see how far an open redirect can carry the request.
My terminal setup, three years in #tooling
zsh, starship and a short list of aliases I actually use. The point was never the rice — it was removing friction between an idea and a command.
royal@sec interactive shell · v1.0
type help for commands · tab autocompletes · press / to focus
try: whoami · cat bio.txt · socials