Security research, bug bounty write-ups, and exploit notes by shellcat.https://shellcat-com.github.io/en-ushttps://shellcat-com.github.io/blog/building-a-face-search-engine/https://shellcat-com.github.io/blog/building-a-face-search-engine/The engineering build log behind the FaceCheck reconstruction — the RAM-only query path, the SCRFD + ArcFace embedder, the ChromaDB cosine index, and the crawlers that mostly don't work. Real code, 252 faces, no billion-scale hand-waving.Sat, 08 Aug 2026 18:00:00 GMThttps://shellcat-com.github.io/blog/ai-era-recon/https://shellcat-com.github.io/blog/ai-era-recon/Subdomain enumeration and URL crawling surface what everyone else is already testing. The bugs that pay are hiding in JavaScript bundles, undocumented APIs, and authentication flows. Here is how AI recon gets to them first.Fri, 07 Aug 2026 00:00:00 GMThttps://shellcat-com.github.io/blog/ai-bug-hunting-pipeline/https://shellcat-com.github.io/blog/ai-bug-hunting-pipeline/The rule that made my AI pipeline work: never let the model that found the bug judge it. Three validation rounds kill 80% of AI-generated findings. Here's the architecture, the prompts, and the dead ends.Tue, 04 Aug 2026 00:00:00 GMThttps://shellcat-com.github.io/blog/hello-shellcat/https://shellcat-com.github.io/blog/hello-shellcat/Why I'm writing these up — a home for the chains, the dead ends, and the methodology behind them.Fri, 01 May 2026 00:00:00 GMT