// Security Researcher

H1tr3_xff

        Finder of CVE-2026-59245: Apache Airflow ...
      
Flare-On 2025 Finisher
Flare-On 2026 Finisher

LOW-LEVEL SEC REVERSE ENG. ANDROID SEC WEB SECURITY BUG BOUNTY AI ENGINEERING

Passionate about low-level security. Also enjoy researching Web security, AI Engineering in my free time. Additionally, I love doing bug bounty hunting in my free time.

// Projects

AI, RAG, Searching 06

Facebook AI Similarity Search

Vector Storage solution part 1: Flat Index and IVF Training in FAISS

Blog ↗

Reverse engineering, Malware, Binary 01

Writeup_Flare-on9

Tackled one of the toughest reversing challenges in Flare-On season 9. Full write-up with analysis and solutions.

Write-up ↗

Binary, Pwnable 02

ROP

Return-Oriented Programming practice. Building exploit chains, bypassing mitigations, one gadget at a time.

Practice ↗

Web security 03

Port-Swigger-write-up

Web security practice on PortSwigger labs — XSS, SQLi, SSRF, CORS, and beyond.

Write-up, Practice ↗

Linux, Ptrace-based injection, Process injection 04

Ptrace-based-Injection

Deep dive into Frida internals and ptrace-based injection mechanisms. Process injection the Linux way.

C ↗

Mobile security, Magisk, Rooted Android 05

REdirector

Shell-based redirector utility. Tooling for security workflows and traffic routing.

Shell ↗