Hi there 👋

I’m John Michael Dacara, a anspiring Web Application Penetration Tester.
I'm currently pursuing a BS in Computer Science at the Polytechnic University of the Philippines.

I specialize in identifying and exploiting web vulnerabilities to help organizations strengthen their security posture.

---

🕵️ About Me

• 🔭 Currently focusing on bug bounty hunting and CTF challenges
• 🌱 Learning advanced web exploitation & red team techniques
• 🛠️ Passionate about offensive security and web application testing
• ⚡ Fun fact: I break things to make them stronger
• 📖 Life verse: "Fixing our eyes on Jesus, the pioneer and perfecter of faith. For the joy set before Him He endured the crosss, scorning its shame, and sat down at the right hand of the throne of God" – Hebrews 12:2
• 🛡️ Pentest quote: "The only way to stop them is to think like them." – Google

---

🛡️ Skills & Tools

• Web Vulnerabilities: SQLi, XSS, CSRF, SSRF, IDOR, RCE, HTTP Request Smuggling, API Testing
• Tools: Burp Suite, Nmap, Metasploit, sqlmap, Hydra, Nuclei
• Scripting: Python, Bash, C
• Platforms: HackerOne, HackTheBox, TryHackMe
  • TryHackMe: Hacker the Rank

---

🏆 Achievements

• 🏆 Completed multiple HackTheBox challenges
• 🥇 CTF Competitions:
  • Kaspersky CTF 2025 → 🏆 Top 1 Philippines, Top 7 Asia
  • Micro Trend CTF 2025 → 90th / 199 (Philippines)
  • Nullcon HackIM CTF Berlin 2025 → 66th / 1103 teams globally
  • ASIS CTF 2025 → 39th / 368 teams, Rank 1 Philippines
  • PascalCTF 2026 → 550th / 855 teams globally (duo only)
  • 0xFUN CTF 2026 → 292th / 1292 teams
• 📈 Progress in PortSwigger Academy → 41% complete

---

💻 Tech Stack (Web Development)

📫 Connect with Me

---