Bernardo de Araujo

Application Security Manager @Shopify.

What have I been doing lately?

In this section I will detail where I have been spending most of my time outside of work hours.


I have been spending quite some time getting back into bouldering. I'm back to V8s, but I would like to get more comfortable at this level and break through V9s in the next few months.

Advanced Web Attacks and Exploitation

This is a certification from Offensive Security that I've just completed. You can read more about my experience in one of my posts

Open Source Projects

On my spare time I like to build small tools that solve a specific problem that I'm currently facing.

My recent ones are:


Needs help reasoning about Safari's ITP? ITP TL;DR; provides real-time domain statistics as you navigate across domains.

Safari's ITP Debug Mode lacks information, this tool is an attempt to make your life as a developer a bit easier.


A modern port scanner written in Rust with an integrated scripting engine.

Ruby Debugging

The goal of this repository is to get you familiar with common debugging tools and idioms from Ruby. At the end of it I hope you will have a better understanding of Ruby itself.


A framework agnostic Ruby gem that allow developers using minitest to specify tags for their classNamees and tests, and run their test suite based on these tags.

Inspired by Elixir's ExUnit tags.

Slack Emoji Grid

Allows you to create a grid of emojis from a single image and automatically uploads them to Slack.

Text Placeholder

A minimal text template engine written in Rust.

© Bernardo de Araujo 2022