Offensive-security specialist focused on penetration testing, vulnerability research, web/API security, exploit validation, and practical security tooling.
I'm an OSCP-certified penetration tester and security researcher, founder of ThreatVector, and GCVE GNA-115.
My primary focus is offensive cybersecurity: identifying attack paths, validating security weaknesses, researching vulnerabilities, and building tooling that makes security testing faster and more repeatable.
I work mainly around web applications, APIs, attack-surface analysis, vulnerability discovery, exploitation research, reconnaissance, and security automation. Software engineering is a supporting part of that work — I use it to build scanners, research utilities, proof-of-concept tooling, and automation for offensive-security workflows.
| Area | Focus |
|---|---|
| Penetration Testing | Security assessment, attack-path discovery, exploitation validation, and technical reporting |
| Web Security | Authentication, authorization, injection classes, business logic, server-side and client-side weaknesses |
| API Security | REST/API attack surface, access control, authentication, input handling, and endpoint testing |
| Vulnerability Research | Vulnerability discovery, root-cause analysis, proof-of-concept research, and coordinated disclosure |
| Reconnaissance | Attack-surface discovery, enumeration, target mapping, and research automation |
| Security Tooling | Offensive-security utilities, scanners, workflow automation, and research tooling |
- OSCP certified
- GCVE GNA-115
- Vulnerability discovery and coordinated disclosure
- CVE / vulnerability research contributor
- Proof-of-concept and exploit-validation research
- Security tooling for repeatable offensive-security workflows
| Project | Security focus |
|---|---|
| SQLGUI | Modern interface for SQLMap focused on SQL injection assessment, scan management, and database-security testing. |
| RainbowSQL | High-throughput reconnaissance and SQL injection research scanner. |
| TetraEar | TETRA/RTL-SDR analysis toolkit for radio-security and signal research. |
| ThreatVector | Offensive-security research, security engineering, and cybersecurity tooling. |
My repositories include additional penetration-testing utilities, vulnerability research, security experiments, automation, and developer tooling.
Penetration Testing · Offensive Security · Web Security · API Security · Vulnerability Research · Reconnaissance · Exploit Validation · Bug Bounty · Security Automation · Attack Surface Analysis
I build tooling primarily to support security research and offensive workflows.
Languages
Python · TypeScript · JavaScript · Go · C# · PHP
Platforms & Tooling
Linux · Docker · Node.js · Next.js · Electron · Bun
- Offensive-security automation and agentic security workflows
- Vulnerability discovery and exploit research
- Web and API attack-surface analysis
- Security-tool development
- SDR / radio-security research
- Improving the speed and repeatability of penetration-testing workflows
- ThreatVector: threatvector.tech
- LinkedIn: linkedin.com/in/adrian-dacka-a3981118a
- Medium: adriandacka.medium.com
- ORCID: 0009-0002-5019-7342
- GCVE: GNA-115
Breaking assumptions. Finding attack paths. Building better security tooling.