BLOG

Field notes on disclosure, recon, and security fundamentals. Filter by tag or search below.

Responsible Disclosure: From Finding to Hall of FameHow I approach vulnerability disclosure: reproduce, document, report privately, and follow up. Lessons from UNESCO, CSIRT DKI Jakarta, and CSIRT Pati.Recon First: Mapping SPA Attack Surface with Sec-XRayWhy I built Sec-XRay: passive and dynamic recon for modern single-page apps, from JS endpoint extraction to secret detection.Spyware: Ancaman Privasi DigitalPengertian spyware, teknik serangan umum, contoh kasus, dan langkah pencegahan praktis.