Services
Independent security work for web2 and web3 systems. I find the bugs that automated scanners miss: logic flaws, deserialization issues, kernel weaknesses, and business logic that can be abused.
Application Security
Web and API penetration testing, auth logic review, SSRF, IDOR, XSS, business logic abuse, race conditions, the OWASP Top 10, and GraphQL, REST and gRPC APIs.
Blockchain Security
Smart contract audits for Solidity and EVM, DeFi protocol review, access control, reentrancy, oracle manipulation, and flash loan attacks.
Reverse Engineering & Malware
Binary analysis for x86 and x64, malware unpacking, IOC extraction, C2 analysis, Windows and Linux internals, kernel level debugging, and threat intel reports.
Infrastructure & Cloud
Docker and Kubernetes security review, cloud config assessment on AWS and GCP, network architecture review, and CI/CD pipeline hardening.
Code Audit & Tooling
Source code review in Go, Python, C, Rust and TypeScript, dependency analysis, custom scanner and fuzzer development, and security automation.
Vulnerability Research
Zero day discovery, CVE research and disclosure, exploit development, fuzzing campaigns, and proof of concept development.
Track Record
- CVE-2026-31431 Kernel LPE (Copy Fail, CVSS 7.8)
- CVE-2025-55182 React Server Components RCE (React2Shell, CVSS 10.0)
- n8n CVE-2025-68613 Expression injection in an automation platform
- Systems engineering and reverse engineering since 2024
Payment
I accept crypto. Contact me for current rates and availability.
0x4a0fcef66f73e978bc895139239dd9a0ca5cec4d0x4a0fcef66f73e978bc895139239dd9a0ca5cec4d