M_1337
I investigate vulnerabilities, assess application security, and build tools to uncover weaknesses that automated security testing miss. My work focuses on offensive security, vulnerability research, and AI-assisted vulnerability detection.
AREAS OF EXPERTISE
01
Offensive Security
Web, API, mobile, and network penetration testing, from attack-surface discovery to exploit validation.
02
Vulnerability Research
C/C++ vulnerability analysis, program analysis, SAST evaluation, and AI-assisted vulnerability detection.
03
OT/ICS Security
Industrial cybersecurity, secure architecture, and security across OT/ICS environments.
RESEARCH & PROJECTS
Vulnerability Research
C/C++ Vulnerability Detection Benchmark
A research benchmark evaluating LLMs, SAST, DAST, and graph-based approaches to identify vulnerabilities in C/C++ code and investigate the reasoning gap in automated detection.
C/C++
LLMs
SAST
DAST
Mobile
SAMobile
A powerful, automated Bash-based tool built for Mobile Security Engineers and CTF players. Streamlines Android static analysis, secret hunting, and security auditing to accelerate mobile application security assessments.
Bash
Android
Static Analysis
LLMs
Malware
Cross-Platform-Keylogger
A lightweight, cross-platform keylogging tool designed for authorized security testing and controlled monitoring. Supports keystroke capture across multiple operating systems to help evaluate endpoint monitoring and security controls in test environments.
Java
python
Cross-Platform
Endpoint Testing
KNOWLEDGE BASE & RESOURCES
[]
Writeups
CyberTalents CTF Solutions & Writeups
Curated solutions across 100+ challenges covering binary reverse engineering, cryptographic attacks, network forensics, and web exploitation.
#CTF
#ReverseEngineering
#Crypto
#NetworkSec
[]
Notes & Labs
Mobile Penetration Testing Labs
Practical mobile security assessments covering exported content providers, native library reverse engineering in Ghidra, and intent abuse.
#Android
#MobileSecurity
#Ghidra
#DeepLinks
[]
Walkthroughs
Hack The Box Machine Walkthroughs
Full kill-chain exploitation guides for competitive HTB machines detailing reconnaissance, CVE exploitation, and lateral movement to root.
#HTB
#PrivEsc
#CVEs
#FootHold