Projects

$ whoami

pwn / web / dfir. OSCP certified. Building and breaking things, mostly on OpenBSD.

• GitHub: github.com/twilightty
• Bluesky: twilightty.bsky.social
• OSCP credential: credentials.offsec.com/fa9c8e27-966f-4631-8490-4e9431cf7f6c

writeups & research

• Vũ à Vũ? (Malware) (VI) — malware analysis of a CHM-based dropper chain
• osu!gaming ctf 2025: username-checker (pwn) — stack buffer overflow exploitation
• HackTheBox: Facts — box writeup

infrastructure

• Rebuilding my website: From Debian to OpenBSD — self-hosting this site on OpenBSD + httpd + pf