SECURITY RESEARCHER // SWEDEN
I break things before they do.
Work with me
Book a security engagement
Authorized audits and pentests for Rust and web codebases. Scoped, ethical, with a real report.
Book a callFlagship project
HUGIN
Coming soonAn intercepting proxy and vulnerability scanner in a single Rust binary.
Every engine in it is mine, written from scratch in Rust — and they go past Burp and Caido on capability, not just speed. It runs local-first with no account or telemetry, and you can drive the whole thing from your AI over 162 MCP tools. Hugin comes soon: Community will be free, and Pro will be a flat €7/month.
Single Rust binary
GUI + CLI in one
Local-first · no account
Drive it from your AI
Findings
all findings →Vulnerabilities I find and disclose responsibly — CVEs, advisories, bug-bounty work.
Local privilege escalation to root in macOS PackageKit
Impact An app could gain root privileges — full local compromise of the machine (read/modify any data, persist, disable protections).
Writing
all writing →Writeups on the bugs above, and articles on tooling, Rust, and method.
JavaScript is the past
JavaScript won the browser, but the next edge in security tooling belongs closer to the machine: native binaries, memory-safe systems code, and tools that can keep up with the protocols.
Read the scope first
Most of the time I lose on a target is lost to my own setup and assumptions — not the target. A short note on the boring discipline that actually moves findings.
Why I built Hugin
Every engine in Hugin is mine, written from scratch in Rust. The honest version of why it exists, before it ships.