shellcat
@shellcat · bug bounty hunter
Independent security researcher. I break web apps, cloud infrastructure, and APIs — then write up what actually worked. Every post here ships with a working proof-of-concept. If I can't prove it, it doesn't get written.
Findings go through coordinated disclosure. For anything sensitive, reach me over an encrypted channel — details on request.