dr3dd@sec:~$ whoami

dr3dd

Security Engineer. Notes on security research, exploitation and CTFs.

• Jul 8, 2026 / 7 min read / Security

  Finding memory bugs in Apple's WebKit, mostly without me

  How I built an LLM-assisted pipeline to hunt memory safety bugs in WebKit, the eight CVEs it turned up across two Safari release cycles, and where a human still has to take over.

• Dec 26, 2023 / 2 min read / Web

  37C3 Potluck CTF 2023 - Santify

  My solve for Santify, a web challenge from 37C3 Potluck CTF 2023.

• Sep 23, 2021 / 4 min read / Web

  DNS Rebinding - Bypassing SSRF Protection

  How DNS rebinding defeats IP-based SSRF filters.