Security engineer / independent services
Software Engineering Graduate focused on product security, offensive tooling, and cloud systems. I build security labs and CTF challenges with CTF.ae, and offer independent application security assessments.
Independent security services
I help teams validate application security and build realistic environments for security training and AI evaluation. Available for scoped engagements and collaborations.
Manual, scoped application security testing focused on exploitable vulnerabilities, authentication and authorization, business logic, APIs, and mobile application attack surfaces. Deliverables include validated findings, risk context, and actionable remediation guidance.
Purpose-built vulnerable applications, agent evaluation environments, and realistic security scenarios for measuring offensive AI capabilities. Reproducible challenges, clear success criteria, and configurable difficulty.
Custom web exploitation challenges and hands-on training labs, from individual exercises to competition-ready scenarios. Includes challenge design, deployment guidance, testing, and organizer documentation.
I also work with CTF.ae on security challenges, labs, and CTF platform development.
Discuss a project →A modern Burp Suite request minimizer built with Java 21 and the Montoya API.
A Caido plugin for detecting Next.js Server Actions.
A distributed database synchronizer using Golang, Fyne, and RabbitMQ to ensure data consistency between geographically dispersed database parts and a central database, even in case of server failures.
A Python Discord assistant for managing schedules, tasks, and daily workflow noise.
A TypeScript CLI for managing Codex skill profiles.
A Caido community plugin for mapping and visualizing GraphQL endpoints.
A flexible and extensible C2 framework built with Golang and React for managing red team operations during penetration testing missions.
A lab environment for experimenting with LDAP, Kerberos, and DNS, utilizing Docker for ease of use and rapid development.
A project that collects job posting data from various sources like LinkedIn and Twitter, providing real-time and historical insights using Hadoop and Kafka.
A simple website to track job applications, providing a structured approach to managing and improving the application process.
Ein revolutionizes penetration testing with its template-based declarative attack system, Go-powered engine, AI-assisted template generation, and a sleek Svelte frontend.
A website to allow tickets buying and hotel reservations for participants in the National Congress of Cybersecurity
A distributed GUI text editor allowing multiple users to edit the same document simultaneously and remotely. Built using RabbitMQ and Golang.
A collection of smart contracts designed to educate developers about common blockchain vulnerabilities.
An online library management system built using .NET, providing features for managing books, members, and borrowing activities.
A platform for a robotics event, featuring user profiles, conference booking, and a personalized space with Japanese-themed animations.
Solvers for Damn Vulnerable DeFi challenges, utilizing Hardhat.js for testing and exploiting vulnerabilities in decentralized finance applications.
Website to hold course material for workshops on full stack development for students, Held in the summer of 2022.
Get in touch
For web and mobile security assessments, AI security benchmark labs, web CTF development, and other collaborations.