The Impact

Real-world security research, critical infrastructure hardening, and tools built for the community. A collection of work demonstrating the transition from theory to impact.

THE JOURNEY CONTINUES...

Confidential (Japan)

IoT Infrastructure Security

Uncovering a critical chain of vulnerabilities in a Japanese IoT ecosystem, leading to full remote command execution on display units.

▹
Attack SurfaceDiscovered an exposed API subdomain via public domain enumeration.
▹
Critical ExploitAchieved shell access through the API, bypassing all authentication.
▹
ImpactAbility to broadcast custom commands to deployed IoT display units.
API SecurityRCEIoTShell

Crezam

AI Talent Intelligence Security
Visit Site ↗

Secured a next-gen hiring platform against advanced AI-specific vectors and critical authentication flaws.

▹
Critical FindingJWT Algorithm Confusion (CVE-2025-30144)
▹
Data Breach PreventionPatched an unrestricted API endpoint leaking the entire user database and AI tokens.
▹
AI SecurityMitigated LLM prompt injection attacks that bypassed system prompting.
JWTLLM SecurityAPI Hardening

Claywatt

Construction IoT Infrastructure
Visit Site ↗

Fortified critical IoT infrastructure and localized ERP systems against vendor-side vulnerabilities.

▹
Network DefenseImplemented Layer 2 Proxying and authorized IP strict access controls.
▹
InfrastructureBuilt on-site firewall solutions from scratch.
▹
Automated DefenseDeployed an AI-based firewall integrated with N8N for autonomous threat response.
IoTN8NFirewall Architecture

Adidas UAE

Enterprise Security Remediation(Via Agency)
Visit Site ↗

Hardened internal directory services and secured IoT access points within the corporate office environment.

▹
Active DirectoryRemediated internal Microsoft AD vulnerabilities.
▹
IoT AccessFixed authorization flaws in office IoT devices.
▹
Human ElementConducted security awareness training for employees.
Active DirectoryIoTCorporate Security

Dunorys

RPA Solutions Audit
Visit Site ↗

Comprehensive security audit of Robotic Process Automation (RPA) infrastructure and bot architecture.

▹
Vulnerability AssessmentIdentified Rpath Linux & UiPath Orchestrator config flaws.
▹
Attack VectorsDemonstrated DLL Injection & API security gaps.
▹
Critical DataSecured sensitive .nupkg code files and RPA bot flowcharts.
RPAUiPathDLL InjectionWindows Server

Capulus Tech

Smart City Infrastructure Audit(Via Agency)
Visit Site ↗

Empowering Safe Cities and Smart Policing through rigorous security auditing.

▹
Core IntegrityAudited against SQL Injection and DLL Injection attacks.
▹
API SecurityIdentified and reported critical API vulnerabilities.
Smart CitiesPenetration TestingSQLi

TechOnroids

Red Team & Auditing

Specialized in ethical red teaming and web application security auditing.

▹
Red TeamingConducted on-site network firewall penetration testing.
▹
DefenseSetup AI-based firewall solutions.
Red TeamingWebSecFirewalls

HOS / Aleaf / Glitchberry

Media Production Security
Visit Site ↗

Protecting high-value intellectual property and pre-release media content.

▹
Privacy ArchitectureDeployed in-house NAS servers for sovereign data control.
▹
Access ControlHardened ERP systems for secure external media sharing.
▹
NetworkOn-site firewall and WLAN security setup.
NASNetwork SecurityERP Hardening

The Arsenal & Origins

Open Source | Bug Bounty | Innovation

Driven by an innate curiosity that began with childhood game exploits, this journey has evolved into building powerful tools for the community and securing global platforms. It's not just about finding bugs; it's about engineering the future of defense.

▹
TooleroidArchitected Link ↗
▹
HackerOneRanked Security Researcher (DeadZord) uncovering critical vulnerabilities in Fortune 500 equivalent platforms. Link ↗
▹
Private ArsenalDeveloped a suite of bespoke penetration testing tools automating complex attack vectors.
Tool DevelopmentBug BountyResearch
Mission StatusOPERATIONS LOGGED.
Return to BaseInitiate Contact