More than just a developer.
AI engineering, software development, vulnerability research, and penetration testing. Two perspectives. One mindset.
01 / BUILD
AI Engineer / Software Developer
Four years of building intelligent tools and operational software. From retrieval pipelines to systems used in the field.
AI Engineer · Military Intelligence Directorate (Aman)
2022–2026. Built and shipped software across AI-powered search, visitor management, and operational event replay. Owned retrieval pipelines, backend APIs, data models, and application logic.
Selected projects
LLM-powered search
Designed and shipped a search tool over sensitive databases, reducing analyst lookup time from minutes to seconds. Built the retrieval pipeline, prompt architecture, and backend API from scratch.
Kav 1
Built a desktop management platform that replaced a fragmented Excel workflow, cutting manual entry from 30 minutes to seconds per visitor. Designed the data schema, access-control model, and REST APIs serving entire battalions.
Real-time event replay
Worked on a C# replay engine, including a data-ingestion pipeline, state-reconstruction logic, and a 3D rendering layer for operational sensor data.
mktsum
An AI-powered market summarization service built on a microservices architecture.
View mktsum on GitHub ↗SQLite Discord Bot
A chat-based interface for connecting to SQLite databases and executing queries through Discord.
View SQLite Discord Bot on GitHub ↗Web RE Toolbox
A browser-based toolbox for encoding, hashing, string and entropy analysis, hex inspection, and disassembly.
View Web RE Toolbox on GitHub ↗Explore the engineering journey →
02 / INVESTIGATE
Vulnerability Researcher / Penetration Tester
Research grounded in how systems actually behave: Android components and IPC, native binaries, authentication, and access control.
Android application security
Analyze exported components, Intents, IPC, and mutable PendingIntent behavior. Build Java PoC apps and reproduce behavior on emulators with ADB.
Reverse engineering & dynamic analysis
Static analysis with IDA Pro, runtime debugging with GDB and QEMU, and ARM/AArch64 work covering memory corruption, control-flow redirection, and ROP.
Original vulnerability research
Identified previously undisclosed vulnerabilities and reported them to maintainers. Technical details remain private while disclosure is pending.
Selected projects
GeoServer SQL injection → RCE
Independently traced and reproduced a newly disclosed SQL injection-to-RCE chain in a controlled lab. Published a Python PoC and technical breakdown for CVE-2026-76904.
View GeoServer SQL injection → RCE on GitHub ↗TranslatePress administrator account takeover
Built a one-day PoC for CVE-2026-19632, demonstrating how disclosed password-reset links can lead to administrator account takeover in vulnerable TranslatePress installations.
View TranslatePress administrator account takeover on GitHub ↗Training
HDE — Offensive Attack & Intelligence Expert · SeeSecurity College · 2026. Graduated with distinction.
Bug bounty
Identified and reported access-control issues affecting notification settings and cross-account shopping-cart data through bug bounty programs.
CTF experience
- 2026 — boroCTF · sieberrSec CTF
- 2024 — Real World CTF — 6th place (team) · Mapna CTF
- 2023 — MapleCTF
- Earlier — BSidesTLV CTF · Hacktoberfest CTF
Explore the security journey →