victor@victeodoro:~/#
São Paulo, BR
Index — 001

Victor
Teodoro

Application Security · Pentesting · Music

I break things on purpose so they hold up later. At least that's what I keep telling myself. Most days that means threat modelling, reading packet captures nobody cares, and writing down what those logs actually said the write-ups, the tools, the logs, and the occasional 2am poem that had nowhere else to go I leave here. Feel free to explore.

./wired.png1bpp · atkinson
Portrait of Wired, 1-bit dithered
It's an exciting time in the world
Write-ups
PDF · data anonymised
Real Systemx pp · x.x MBFrom Insecure Authentication to Stage Exploit - In ProgressUsing non-revoked access and insecure credential patterns to get admin privileges2026-09-06
↓ PDF
All write-ups1 papers→
Built
Open source · click through to the repo
All tools5 repos→
Articles & logs
via substack rss
01Shift LeftFor a long time, AppSec was treated as a validation step performed after the application had already been developed. The problem is that requirements had already been gathered and decisions had already been made, causing entire features to depend on security flaws, delivering vulnerability-as-a-service to the user base. Shift Left solves that by establishing security mechanisms as early as possible, before deployment.2026-09-06All articles & logs1 posts→
Last played
TeardropsBring Me The Horizon
Spotify · now playing
Teardrops