I'm a Cybersecurity Specialist specializing in Detection Engineering, Threat Hunting, and Penetration Testing. 🛡️ I'm a passionate learner who loves exploring new vulnerabilities, building robust defense systems, and leveraging AI to automate SOC operations. 🚀

Currently, I'm diving deep into Red Teaming ⚔️ and expanding my Adversary Emulation skills 🎯.

Published CVEs & GitHub Security Advisories

• 🔴 [PicPeak (Critical)] Admin Account Takeover via Malicious Backup Restore (GHSA-qxfx-4493-4v8f)
• 🟡 [PicPeak (Moderate)] ZIP Slip in Archive Restore (GHSA-jfhw-fj23-fx6x)
• 🟡 [PicPeak (Moderate)] Path Traversal via Unsanitized Filename (GHSA-pc72-jf53-w28j)
• 🔵 [InvoicePlane] High: CSRF (Recurring Invoice Stop via GET) (GHSA-346c-gqqq-mrm2)
• 🔵 [InvoicePlane] Medium: CSRF (Missing Validation on Delete Endpoints) (GHSA-g53q-v2pv-xr83)
• 🔵 [InvoicePlane] Medium: IDOR (User Password Change) (GHSA-x38q-xhjj-jr8w)
• 🔵 [InvoicePlane] Low: Log Injection via Unsanitized Cron Key (GHSA-9372-vj68-hmc3)
• 🔵 [InvoicePlane] Low: Loose Type Comparison in Auth (GHSA-qf9q-2hxm-4wh9)

Open Source Security Contributions

• 🔴 [Pennyw0rth/NetExec] Patched critical SSH threading race conditions and Pre2k Directory Traversal vulnerabilities.
• 🔵 [SigmaHQ/sigma] Developed and contributed detection rules for eBPF rootkit persistence and abuse.
• 🔵 [stamparm/maltrail] Contributed fixes for false positives in network traffic detection heuristics.

🔷 C.O.R.E.
Enterprise AI SOC Agent · Automates detection, triage & response via LLMs.

🔷 ARGUS
Next-Gen NDR · Unsupervised Deep Learning to detect zero-day exploits.

🔷 EREBUS
Dark Web OSINT · AI-Powered Tor crawling + local LLMs (Ollama).

🔷 Omnisearch
Attack Surface Mapping · All-in-one passive recon & web probing utility.

[+] ACTIVE COMPETITIVE PROFILES