27Rafa

Web security researcher specializing in broken access control, authentication flaws, and session management. I build lightweight, dependency-free tooling for security testing and document what I find.