Specialized offensive security developer focused on Red Team automation and vulnerability research using Go and Java. Demonstrates deep understanding of low-level network protocols and exploit chains, creating operational tools that prioritize stealth and efficacy over software engineering polish.
Repositories consistently lack automated unit tests, with explicit 'TO-DO' comments highlighting this gap.
Projects feature comprehensive READMEs and high-quality inline comments that explain complex attack logic.
Logical separation of concerns is present (e.g., build tags for OS-specific code), but relies heavily on brittle global state.
Frequent code duplication and usage of hardcoded paths/values significantly hamper long-term maintenance.
Demonstrates advanced knowledge in architecting C2 channels (SiestaTime) and weaponizing RCE vulnerabilities.
Capable of complex systems programming and modifying standard libraries (crypto/tls), though struggles with state management.
Deep low-level understanding shown by implementing custom SSH handling and TLS fingerprint manipulation (JA3 spoofing).
Functional understanding of Java web stacks and serialization exploits, but projects lack standard build tooling (Maven/Gradle).
Extensive cataloging of CVEs and creation of educational Proof-of-Concept exploits across multiple languages.
