Highly skilled security researcher and reverse engineer specializing in dynamic binary instrumentation (DBI) and fuzzing. Creator of widely adopted tools like `drltrace` and `manul`, demonstrating deep expertise in low-level Windows/Linux internals and automated vulnerability discovery. Work prioritizes high-impact functionality and novel research capability over modern software engineering polish.
Consistently tackles complex problems (ASLR, blackbox fuzzing) with novel, functional solutions.
Scorecards highlight exemplary READMEs with clear value propositions, usage guides, and visualization showcases.
Almost zero automated testing across major repos; relies on manual verification, posing stability risks.
Heavy reliance on deprecated dependencies (Python 2) and older APIs creates significant technical debt.
Expert-level utilization of DynamoRIO and Intel PIN to build complex tracing and analysis tools like `drltrace` and `tvc`.
Developed multiple custom fuzzers (`manul`, `drAFL`, `netafl`) implementing advanced coverage-guided strategies and cross-platform support.
Created specialized plugins for IDA Pro (`IDAmetrics`) and tools specifically for malware analysis and complexity metrics.
Strong command of systems programming required for DBI clients and fuzzer backends, though code sometimes lacks modern safety idioms.
Extensive use of Python for tooling and glue code, but relies heavily on legacy Python 2 syntax and lacks modern patterns like type hinting.
