application security engineer

Bartłomiej Górkiewicz

Senior Application Security Engineer at Doyensec, core maintainer of the InQL GraphQL scanner, and former penetration tester at Idemia. Bug bounty hunter with several CVEs across enterprise platforms. Focused on web and mobile security, now expanding into IoT and embedded devices.

7+years experience
10CVEs credited

Writeups & publications

view all →
Vibe Reversing Python Bytecode ↗ Feb 19, 2026
An intuitive, quick-reference guide published in PagedOut! magazine that explores practical techniques for analyzing and reverse engineering Python bytecode.
InQL v6.1.0 Just Landed with New Features and Contribution Swag! ↗ Dec 2, 2025
An overview of the new features in InQL v6.1.0, highlighting its GraphQL schema brute-forcer, server engine fingerprinter, and an automatic variable generation
Getting a Root Shell on the 2nd Gen Eero Router Oct 21, 2024
A step-by-step hardware hacking guide on bypassing boot restrictions via SPI flash modification to achieve a persistent root shell on a 2nd Gen Eero router.

CVEs & advisories

view all →