Security researcher and systems engineer. CVE disclosure, authorized web-app pentests, and Hugin — an intercepting proxy and scanner in a single Rust binary.https://dodu.se/en-ushttps://dodu.se/blog/javascript-is-the-past/https://dodu.se/blog/javascript-is-the-past/JavaScript won the browser, but the next edge in security tooling belongs closer to the machine: native binaries, memory-safe systems code, and tools that can keep up with the protocols.Thu, 25 Jun 2026 00:00:00 GMTRustJavaScriptsystemssecurity toolinghttps://dodu.se/blog/read-the-scope-first/https://dodu.se/blog/read-the-scope-first/Most of the time I lose on a target is lost to my own setup and assumptions — not the target. A short note on the boring discipline that actually moves findings.Mon, 15 Jun 2026 00:00:00 GMTmethodologybug-bountyhttps://dodu.se/blog/why-i-built-hugin/https://dodu.se/blog/why-i-built-hugin/Every engine in Hugin is mine, written from scratch in Rust. The honest version of why it exists, before it ships.Wed, 10 Jun 2026 00:00:00 GMTHuginRusttooling