Cristian Vargas

I’m Cristian Vargas, a pentester focused on web applications and APIs.

I work on penetration testing and bug bounty research, mainly access control and application logic.

I build reconnaissance tools and Caido extensions to automate parts of my testing workflow.

This site

I post CTF writeups, technical notes, and documentation for my tools here.

Focus areas

• Web & API pentesting
• Access control and business logic
• Reconnaissance and security automation
• CTFs and practice labs
• Building tools for my own workflow