Cybersecurity Director · Security Researcher
I lead cybersecurity and stay hands-on with security research. Here I share the tools I build, the systems I investigate, and reproducible labs behind my public work.
- Foreshock — Early vulnerability intelligence: correlating public signals and measuring their lead time against NVD.
- AstroScan — Evidence-oriented scanning for selected Astro framework vulnerabilities.
- Android Security Lab — A reproducible mobile research environment with Ghidra, Frida, mitmproxy, and an Android emulator.
- RecoverSQLite — Recovery of deleted information from SQLite files.
- CodeCome — AI-assisted vulnerability research with structured findings, sandbox validation, and auditable evidence.
Reproductions, impact validation, and proof-of-concept implementations for publicly disclosed vulnerabilities. Original discovery credits and testing scope are documented in each repository.
- Linux Binder: process-lifetime use-after-free — CVE-2026-64468. Kernel research with a vulnerable/fixed comparison in QEMU/KVM.
- Dovecot: SQL authentication bypass — CVE-2026-24031. Reproduction and authentication testing in a Docker lab.
- Roundcube: stored XSS in plain-text email — CVE-2026-54433. Impact validation with a reproducible vulnerable/fixed comparison.
- Rejetto HFS: session forgery to code execution — CVE-2026-61500. Proof of concept and a vulnerable/fixed Docker comparison.
- Linux qdisc: rate-table race — CVE-2026-68138. Local privilege-escalation research in a QEMU lab.
More repositories · Earlier projects