Hey, welcome!

If you’ve somehow ended up here — hi. This is the very first post on this blog, so no writeup, no exploit chain, just a quick “who’s typing this” before we get into the fun stuff.

whoami⌗

I’m sh1nn. I like breaking things (legally) — mostly penetration testing and security research. Somewhere between CTFs, bug bounty programs, and way too many browser tabs open at 2am trying to figure out why a payload isn’t firing.

What this blog is actually for⌗

Pretty much a public notebook for:

  • CTF write-ups — full thought process, not just the final payload
  • Bug bounty notes — patterns I keep running into, small wins, occasional facepalms
  • CVE analysis — digging into root causes, not just copy-pasting a PoC
  • Attack technique deep-dives — the kind of explanation I wish I’d had when I first ran into these

A quick disclaimer⌗

I’m still learning — a lot, actually. If something here is wrong, incomplete, or could be explained better, I’d genuinely love to hear about it. This blog is as much about documenting the journey as it is about sharing anything polished.

Anyway, that’s the intro out of the way. First real write-up coming soon — thanks for stopping by!