Pentester · CTF player

I break web apps so they don’t break for real.

Hi, I’m Martin — online as null_byte. Penetration tester at ING. I write up the CTF challenges I solve and keep notes on everything technical in between.

27published writeups
17CTF events played
1technical notes
PT1certified

Latest writeups

all 27 writeups →
deadface 2025 web/hack the night seriesdeadfacedeadface 2025 web/headers gamedeadface1753c web/Do Not Cheat1753cswampCTF web/SwampTech SolutionsswampCTFknightCTF web/Admin AccessknightCTF

Latest notes

all 1 note →
How this site is publishedmeta

CTFs played

About

I’m really passionate about cybersecurity, particularly penetration testing, and I do it for a living at ING.

Outside work I play CTFs — mostly web challenges — and write up how I solved them, the dead ends included.

Got a target in scope?
Say hello.