I'm a Cybersecurity Specialist specializing in Detection Engineering, Threat Hunting, and Penetration Testing. 🛡️ I'm a passionate learner who loves exploring new vulnerabilities, building robust defense systems, and leveraging AI to automate SOC operations. 🚀
Currently, I'm diving deep into Red Teaming ⚔️ and expanding my Adversary Emulation skills 🎯.
Published CVEs & GitHub Security Advisories
- 🔴 [PicPeak (Critical)] Admin Account Takeover via Malicious Backup Restore (GHSA-qxfx-4493-4v8f)
- 🟡 [PicPeak (Moderate)] ZIP Slip in Archive Restore (GHSA-jfhw-fj23-fx6x)
- 🟡 [PicPeak (Moderate)] Path Traversal via Unsanitized Filename (GHSA-pc72-jf53-w28j)
- 🔵 [InvoicePlane] High: CSRF (Recurring Invoice Stop via GET) (GHSA-346c-gqqq-mrm2)
- 🔵 [InvoicePlane] Medium: CSRF (Missing Validation on Delete Endpoints) (GHSA-g53q-v2pv-xr83)
- 🔵 [InvoicePlane] Medium: IDOR (User Password Change) (GHSA-x38q-xhjj-jr8w)
- 🔵 [InvoicePlane] Low: Log Injection via Unsanitized Cron Key (GHSA-9372-vj68-hmc3)
- 🔵 [InvoicePlane] Low: Loose Type Comparison in Auth (GHSA-qf9q-2hxm-4wh9)
Open Source Security Contributions
- 🔴 [Pennyw0rth/NetExec] Patched critical SSH threading race conditions and Pre2k Directory Traversal vulnerabilities.
- 🔵 [SigmaHQ/sigma] Developed and contributed detection rules for eBPF rootkit persistence and abuse.
- 🔵 [stamparm/maltrail] Contributed fixes for false positives in network traffic detection heuristics.
🔷 C.O.R.E.
Enterprise AI SOC Agent· Automates detection, triage & response via LLMs.
🔷 ARGUS
Next-Gen NDR· Unsupervised Deep Learning to detect zero-day exploits.
🔷 EREBUS
Dark Web OSINT· AI-Powered Tor crawling + local LLMs (Ollama).
🔷 Omnisearch
Attack Surface Mapping· All-in-one passive recon & web probing utility.
[+] ACTIVE COMPETITIVE PROFILES
