Hello, I'm David.

I am a high school security researcher who programs in Python, C, and Rust and enjoys web application hacking and all forms of offensive security. I am working towards getting my BSCP in the future and doing PortSwigger's Web Security Academy.

🛡️ Philosophy & Focus

I enjoy building privacy-preserving tools, allowing those who use them to relax knowing that their privacy is protected. I believe privacy is a fundamental human right, and strive to help people achieve and protect it.

My projects:

• Sdig CLI
  • DNS Client over TLS 1.3
  • socks5 proxy support
  • advanced fault tolerance
  • exposure minimization
  • configurable DNS providers TOML file
  • asynchronous DNS race condition producing tolerance even if 1 DNS server does not have the results necessary, ending the query when either a response where an answer is received, or all DNS queries either time out or respond without a valid answer.

Tools I am familiar with:

• Burp Suite
• Metasploit (msfconsole & Meterpreter)
• Ffuf
• exiftool
• MAT2
• Botan
• SQLmap
• sherlock (OSINT tool)
• Maigret (OSINT tool)
• Sequoia PGP
• Tor
• UFW
• Kali Linux
• hashcat
• Monolith
• nmap
• setoolkit

Summary:

Programming Languages: Python, C, and Rust.
Focus Area: Web appsec, Network Protocols, Privacy Tooling, OSINT