Hi, I'm Brendon — thanks for stumbling upon my website! I'm a Penetration Tester who loves uncovering new attack paths, with a particular focus on Web Exploitations and AI Automations.
Four years of legal break-ins across government, MNCs and SMEs in Singapore.
Based in Singapore, I'm a penetration tester who has spent the last 4 years breaking into things legally. My experience spans government agencies, global MNCs and SMEs across the region. Whether it's a misconfigured JWT, an exposed admin panel, or a logic flaw nobody else looked twice at — I enjoy the hunt.
Notably, I discovered a CRITICAL 9.8 CVE granting full administrative access on a Windows endpoint. More to come.
Holder of the OSCE³ title from OffSec — earned by completing all three advanced certifications: OSWE, OSEP and OSED.
Synced live from GitHub. Click through for proofs of concept.
Unauthenticated arbitrary file upload in the Media Manager allows an attacker to upload a crafted PHP file and execute arbitrary code — yielding full administrative access on Windows.
Long-form on Medium. Technical PoCs on GitHub.
A candid breakdown of the OSCP journey: the pain, the methodology, the 24-hour exam war stories, and what it actually takes to earn one of offensive security's most respected certs. Pinned article on Medium.
Read on Medium →How a single unvalidated upload endpoint in CLESS Server v4.5.2 led to unauthenticated remote code execution and full Windows admin takeover. CVSS 9.8 CRITICAL.
Read PoC →Python & full-stack tooling I built to remove manual drudgery from engagements — headlined by VibeDocs, my open-source report generator.
My biggest build to date — a full-stack, open-source penetration-test
report generator that turns raw findings into clean, consistent Word & PDF deliverables
(plus Excel trackers) in minutes. Ships a reusable findings library, CVSS scoring, scan import (Nessus /
Prowler / Steampipe), auto-generated report templates, and one-click Word / PDF / encrypted-ZIP export.
Self-hostable with Docker — clone, docker compose up, done.
Custom web security testing suite — automated recon, parameter fuzzing, endpoint enumeration, and vulnerability discovery streamlined for Web VAPT engagements.
GitHub →The Burp Suite Professional counterpart to Web-Suite — a single loadable
.bapp extension adding 32 web-testing modules (XSS, SQLi, SSRF, JWT forge, GraphQL, request
smuggling and more) into one consolidated findings view.
Converts Nessus CIS compliance scan results into structured, client-ready Excel reports with full summary of comply/non-comply findings. Eliminates hours of post-scan formatting.
GitHub →Terminal-driven tool that automates VA reporting — removes risk-accepted findings, buckets by category, reassesses CVSS scores, and closes remediated findings in your tracking sheet.
GitHub →Zero-dependency host discovery for infra VAPT — ingests client IP lists or the master Excel tracker, sweeps with fping + nmap, and outputs live hosts by category plus a LIVE/DEAD map to paste straight back into the tracker.
GitHub →Fully offline source code review automation — orchestrates 8 open-source SAST/SCA tools over a codebase, dedupes across tools, triages false positives, and reports, all without a byte of client code leaving the machine.
GitHub →Three-stage automated WiFi auditing pipeline for wireless VAPT — recon, deauth/handshake & PMKID capture, and offline cracking, with a decision engine per SSID and an auto-generated client report.
GitHub →Automation scripts for exploit-development workflows built during OSED prep. Handles bad character analysis, shellcode generation, and skeleton exploit scaffolding.
GitHub →Security, pentesting, war stories — reach out below.
I'd love to connect if you want to talk cybersecurity or pentesting. Reach out via any of the channels below.
For sensitive communications, encrypt with my PGP key. Fastest responses via email or LinkedIn.