Specializing in Active Directory post-exploitation, cloud attack paths (AWS/Azure), kernel exploitation, and automated source code security audits. Documented 14 CVE disclosures and performed audits for Fortune 100 infrastructures.
Responsible disclosures, exploit mitigation advisories, and open-source defensive tools
Discovered critical authentication bypass in enterprise identity provider library caused by XML canonicalization parsing errors.
Automated graph-based AWS IAM privilege escalation discovery engine detecting non-obvious identity takeover vectors.
Linux eBPF security probe monitoring suspicious ptrace injections and memory patching in production container runtimes.
Available for red team penetration testing, cloud architecture security reviews, and executive threat modeling.