Writeups from CTF competitions, the projects I’ve built, and long-form walkthroughs.
14 writeups5 projects2 walkthroughs
A summer-internship platform that continuously validates whether real CVEs in an organization's own software are actually exploitable — and whether the SOC detects them — by safely reproducing each finding in a disposable, network-isolated sandbox behind strict human approval gates.
Recon Orchestration Platform
A terminal-native recon copilot for bug bounty and offensive security: a Go pipeline engine that orchestrates external tools into reproducible, crash-safe campaigns, normalizes and triages the results into one SQLite datastore, and keeps the human in control of every decision.
Malware Analysis & Config Decryption
A deep-dive technical analysis of the XWorm RAT (v3.1), covering its layered loading mechanism, AES-256 configuration decryption, C2 protocol, and multi-component persistence strategies.
Internships and full-time positions in incident response, detection engineering, malware research or security tooling, or a CTF team that needs another player.
azizhaddadi10@gmail.com