About me

OSCP-certified penetration tester with 9 years of software engineering experience, specialized in web application, API and Active Directory security testing. I perform authorised penetration tests and white-box assessments on production systems, combining a strong development background (PHP, Laravel, JavaScript/TypeScript) with manual exploitation and source code review to find root causes, not just symptoms. I write technical security research on my blog, jprhack.net, and built labs.jprhack.net — this platform — to practice and teach hands-on offensive security.