U-Boot Bootloader Exploitation
a critical 1-second attack window in embedded bootloaders enabling complete device compromise through serial interface manipulation.
Experience
Aug 2025 - Present
Embedded Security Engineer
Aitron
- Performed penetration testing on embedded systems and IoT devices, identifying vulnerabilities in firmware, hardware interfaces, and communication protocols.
- Designed and developed secure embedded hardware/software solutions with a focus on resilience against real-world cyberattacks.
Jan 2023 - Present
ProHacker
HackTheBox
Active member solving challenges and contributing to the cybersecurity community
Recent Work
CVE-2025-32463
a privilege escalation vulnerability in sudo chroot affecting Linux distributions worldwide.
Malware Analysis Portfolio
Comprehensive analysis of modern malware families including Remcos RAT, AsyncRat, NetSupport, and AESRT Ransomware.
Tools & Binaries
tcpdump-static-aarch64
tcpdump-static-aarch64: ELF 64-bit LSB pie executable, ARM aarch64, version 1 (SYSV), static-pie linked, with debug_info, not stripped
strace-static-aarch64
strace: ELF 64-bit LSB executable, ARM aarch64, version 1 (GNU/Linux), statically linked, for GNU/Linux 3.7.0, with debug_info, not stripped