Cybersecurity engineer and researcher with experience in AppSec, vulnerability research, cloud security, security automation. Proficient in Machine Learning and Deep Learning.

I build both offensive and defensive tooling: breaking web applications, validating exploits, mapping cloud attack paths, automating threat intel, and letting AI handle the boring security code reviews.

Currently hunting vulnerabilities in OSS while building AI SAST and a threat intelligence platform, doomscrolling fresh CVEs and research papers at 3 a.m. like a normal person scrolls TikTok.

Featured researches:

• Malicious Operational Logic Observation Transformer

Some OSS vulnerabilities that I've found:

• Path Traversal in filebrowser - 35.5k ⭐
• JWT bypass to RCE in FUXA - 4.7k ⭐
• Sandbox bypass via file URI parsing in anyquery - 1.7k ⭐
• SSTI to RCE in microsoft/prompty - 1.2k ⭐
• SSRF in utcp-http
• OS Command Injection in Network-AI