About

Hello. My name is Karol Czubernat.

I work on penetration testing of web applications, infrastructure (including AWS) and mobile apps. In my free time I focus on vulnerability research and finding new CVEs in open-source projects, as well as OSINT/CTI and dark web research related to cybercrime.

I’m the author of around 30 confirmed CVEs and hold the Burp Suite Certified Practitioner (BSCP) certification.

This site is where I share notes on offensive security and CTI.