Tools, labs and research I’ve built: detection pipelines, recon automation and malware teardowns.
5 projects
A summer-internship platform that continuously validates whether real CVEs in an organization's own software are actually exploitable — and whether the SOC detects them — by safely reproducing each finding in a disposable, network-isolated sandbox behind strict human approval gates.
Recon Orchestration Platform
A terminal-native recon copilot for bug bounty and offensive security: a Go pipeline engine that orchestrates external tools into reproducible, crash-safe campaigns, normalizes and triages the results into one SQLite datastore, and keeps the human in control of every decision.
Malware Analysis & Config Decryption
A deep-dive technical analysis of the XWorm RAT (v3.1), covering its layered loading mechanism, AES-256 configuration decryption, C2 protocol, and multi-component persistence strategies.
Packer Detection & Unpacking Tool
A Python CLI tool that identifies packed malware using Shannon entropy analysis, a signature database of 9 known packers, and structural heuristics that catch unknown packers — then attempts automatic unpacking via UPX and MPRESS.
ZIP Password Cracker
A fast, lightweight Python CLI tool for cracking encrypted ZIP file passwords using dictionary attacks — featuring real-time feedback, auto-extraction, password logging, and both interactive and command-line modes.
Internships and full-time positions in incident response, detection engineering, malware research or security tooling, or a CTF team that needs another player.
azizhaddadi10@gmail.com