Shpend Kurtishaj
I break web applications for a living: authentication and authorization flows, OAuth and SAML, and the places where systems trust each other a little too much.
hacker · software engineer · experienced mistake makerprojects
- udpz
Fast, root-less, probe-based UDP service scanner. Built because nmap’s UDP scanning is the slow part of every engagement.
- mailphisher
Burp extension that watches for your payload in outbound requests, then logs into a test mailbox to confirm email content injection end to end.
- Burp-Response-Handler
Requests the grey, never-fetched nodes the spider leaves behind in Burp’s sitemap and fills in their responses.
writing
- What is AI
A short, plain-language map of AI, machine learning, and the two kinds of models.
- My first post
This is my first post guys!