Interested in distributed systems, applied cryptography, and practical security tooling.
Currently building ssrf-lab, a testing harness that checks whether SSRF defenses actually block requests or whether those requests merely fail for unrelated reasons.
https://github.com/roshan-amble/ssrf-lab
Always interested in hearing from people maintaining server-side URL fetchers or dealing with difficult security regression tests.