A pseudonymous security research blog. Three posts. No padding. No SEO fluff. Every piece of content has a reason to exist — either it documents a methodology that paid out, or it captures a system that others can adapt and use.
| # | Post | |
|---|---|---|
| 3 | The model that finds the bug will defend the bug Why AI pipelines need adversarial validation — and how to build a gate that kills 80% of false positives before you waste a single Burp request. |
Aug 2026 |
| 2 | How I do recon Subdomain enumeration gives you a haystack. AI gives you a classifier. JS bundle mining, API surface mapping, auth topology, and hypothesis-driven recon. Includes the BBHUNTER automation tool. |
Aug 2026 |
| 1 | Starting shellcat Why this blog exists. What goes here. The methodology transfers — the payloads don't. |
May 2026 |
Astro 5 · Zero JavaScript by default · JetBrains Mono · Dark theme only
- Zero client JS except the dark-mode toggle and code-copy buttons
- View transitions via Astro's ClientRouter — no full-page reloads
- Monochrome palette — near-black
#0a0a0a, gray text#d4d4d8through#5c5c66 - Grain texture + scanline overlay on the body
- RSS feed at
/rss.xml, sitemap at/sitemap-index.xml
Drop a Markdown file in src/content/blog/:
---
title: 'Your title'
description: 'One or two sentences — shown on the homepage and in the meta tag.'
pubDate: 2026-08-07
tags: ['SSRF', 'High']
---
Your content here. Code blocks get syntax highlighting and a copy button.Commit and push. GitHub Actions builds and deploys.
npm install # once
npm run dev # localhost:4321 — hot-reloads
npm run build # production build to dist/
npm run preview # preview the built site| Layer | What's protected |
|---|---|
| Git history | Committed as shellcat via GitHub noreply email — no real name |
| Site config | Pseudonymous author, no location, no email, no photo |
| Avatar | Original illustration — not reverse-image-searchable |
| Socials | GitHub + RSS only — no X, no LinkedIn, no Instagram |
No real identity anywhere in the repo, the commits, or the deployed site.