I break things to understand them. I build things to secure them.
Security engineer focused on web penetration testing, attack surface management, and security automation. Maintainer of ARL-Next, an open-source attack-surface reconnaissance platform with native MCP (Model Context Protocol) support that lets AI agents query multi-dimensional asset profiles. Currently exploring AI security: how agents should — and should not — be given security tooling.
- Focus / Web Penetration Testing, Attack Surface Management, AI Security
- Stack / Python services and tooling (Flask, Celery, MongoDB), Vue front-ends, Docker
- Also / Go — learning in the open; notes and small tools in go-learn
- Writing / WeChat official account “owl安全” — security notes and ARL-Next release updates
Modern attack-surface reconnaissance & asset monitoring platform — rebuilt from classic ARL with async decoupled scheduling, enterprise asset correlation, and native MCP support. Docker-ready.
A modern SRC (Security Response Center) bug-bounty knowledge base — real-world vulnerability hunting experience and automation tooling, built for the community.
Applying recursive agent harnessing to cybersecurity: multi-domain benchmark evaluation and 8-component optimization for security agents.
Go learning notes for security engineers: from basics to a concurrent TCP port scanner.
- Email [email protected]
- GitHub @owl234