I’m John Michael Dacara, a anspiring Web Application Penetration Tester.
I'm currently pursuing a BS in Computer Science at the Polytechnic University of the Philippines.
I specialize in identifying and exploiting web vulnerabilities to help organizations strengthen their security posture.
- 🔭 Currently focusing on bug bounty hunting and CTF challenges
- 🌱 Learning advanced web exploitation & red team techniques
- 🛠️ Passionate about offensive security and web application testing
- ⚡ Fun fact: I break things to make them stronger
- 📖 Life verse: "Fixing our eyes on Jesus, the pioneer and perfecter of faith. For the joy set before Him He endured the crosss, scorning its shame, and sat down at the right hand of the throne of God" – Hebrews 12:2
- 🛡️ Pentest quote: "The only way to stop them is to think like them." – Google
- Web Vulnerabilities: SQLi, XSS, CSRF, SSRF, IDOR, RCE, HTTP Request Smuggling, API Testing
- Tools: Burp Suite, Nmap, Metasploit, sqlmap, Hydra
- Scripting: Python, Bash
- Platforms: HackerOne, HackTheBox, TryHackMe
- TryHackMe: Hacker the Rank
- 🎯 Reported vulnerabilities in private bug bounty programs
- 🏅 Ranked in the Top % on TryHackMe
- 🏆 Completed multiple HackTheBox challenges
- 🥇 CTF Competitions:
- Kaspersky CTF → 🏆 Top 1 Philippines, Top 7 Asia
- Micro Trend CTF → 90th / 199 (Philippines)
- Nullcon HackIM CTF Berlin 2025 → 66th / 1103 teams globally
- ASIS CTF 2025 → 39th / 368 teams, Rank 1 Philippines
- 📈 Progress in PortSwigger Academy → 41% complete
