Pentester in Barcelona. I break things professionally, then build the tools I wish I'd had.
Most of my work is offensive security — chaining vulnerabilities, writing recon pipelines, and turning noisy scan output into something actionable. The rest of the time I build infrastructure, usually because I got tired of a tool not existing.
Vulnerabilities disclosed to Netflix · Apple · Google · Microsoft · Epic Games.
nabla · Rust, pgrx
Non-blocking incremental materialized views for PostgreSQL 17, maintained from the write-ahead log with real-time delta subscriptions. Writers never serialize behind view refresh.
42-vscode-autoinstaller · Shell
Installs VS Code into a 42 student's home directory: PATH, desktop launcher, Bash and Zsh.
nabla: Postgres views maintained from the WAL, so writers never wait — Sep 2026
More at tomaquet18.dev · RSS
tomaquet18.dev · @tomaquet18 · LinkedIn · tomaquet18@protonmail.com




