Write-ups on what I build, what I break and what I investigate.https://willemlab.org/en-zahttps://willemlab.org/writing/portswigger-sqli-union/https://willemlab.org/writing/portswigger-sqli-union/Working out the column count, finding a text column, and pulling the users table, with the parameterised fix.Wed, 30 Jun 2027 00:00:00 GMTbreakhttps://willemlab.org/writing/security-scanning-go-pipeline/https://willemlab.org/writing/security-scanning-go-pipeline/govulncheck, gosec and an image scan in GitHub Actions, what each one caught on Catchment, and the false positive I suppressed.Mon, 24 May 2027 00:00:00 GMTbuildbreakhttps://willemlab.org/writing/threat-modelling-home-water/https://willemlab.org/writing/threat-modelling-home-water/STRIDE on a system with a borehole pump, two tanks and a Go API, and why the pump relay is the asset that matters most.Mon, 19 Apr 2027 00:00:00 GMTdesignhttps://willemlab.org/writing/catchment-phase-1/https://willemlab.org/writing/catchment-phase-1/What I built in phase 1, why it’s plain Go and SQLite, and what the first month of real rain data showed.Sun, 28 Mar 2027 00:00:00 GMTbuildhttps://willemlab.org/writing/anatomy-compromised-wordpress/https://willemlab.org/writing/anatomy-compromised-wordpress/Three discovery waves, 23 malicious files and one attacker toolkit, worked through with PICERL.Mon, 12 Oct 2026 00:00:00 GMTinvestigate