recon › exploit › prove impact › disclose
spidyops:~$ cat ~/arsenal
recon attack-surface mapping, subdomain + asset discovery
web authz / IDOR, SSRF, injection, business-logic flaws
chaining turning low-sev primitives into real impact
proof minimal-data PoCs — enough to prove, nothing more
reporting clear writeups, reproducible steps, responsible disclosure
spidyops:~$ ls ~/building
sadaqah-jariyah/fitra/ for the global Muslim community
— in development [private]
spidyops/ personal × business platform at spidyops.com
— in development [private]
Source stays private until release. Public repos here are the supporting tooling and writeups that don't need to stay closed.
spidyops:~$ cat ~/findings
> nothing published yet — by design, not by absence
Findings land here as disclosure windows close. Writeups and longer-form notes will be posted at https://spidyops.com.
spidyops:~$ cat ~/contact
security disclosure security@spidyops.com
general ask@spidyops.com
web https://spidyops.com
disclosure policy https://spidyops.com/.well-known/security.txt
// built clean — no trackers, no third-party SVG services, no visitor pixels