Welcome to my website! I'm a security researcher focused on web application and embedded device security, and red teaming.

My Work

Findings

4 entries
IDSeverityTitleTargetYear
CVE-2025-59449criticalInsufficient Authorization ControlsYoLink Device Hub2025
CVE-2025-59452criticalPredictable Device CredentialsYoLink Device Hub2025
CVE-2025-59448highInsecure Network TransmissionYoLink Device Hub2025
CVE-2025-59451mediumImproper Session ManagementYoLink Device Hub2025

Projects

3 entries
NameSummaryStack
yolink-researchVulnerability research on the YoLink Device Hub. Four assigned CVEs.embedded · iot
rusty-malwareA malware development library written in Rust.rust · offsec
smart-grill-reReverse engineering and exploitation of a smart grill controller.embedded · re

Certifications

CodeNameIssuerYear
OSWEOffensive Security Web ExpertOffSec2023
OSCPOffensive Security Certified ProfessionalOffSec2022