Application Security Engineer @ KKB · Bug Hunter · Tool Builder
| CVE | Target | Type | Year |
|---|---|---|---|
| CVE-2026-21518 | Microsoft Visual Studio Code | Remote Code Execution | 2026 |
| CVE-2023-6160 | LifterLMS WordPress Plugin | Directory Traversal | 2023 |
| CVE-2023-6164 | MainWP Dashboard WordPress Plugin | CSS Injection | 2023 |
Also found a security vulnerability in curl — acknowledged in the official thanks page.
| Project | Description | Stars |
|---|---|---|
| Nuclei-AI-Prompts | AI-powered security prompts for Nuclei — nucleiprompts.com |  |
| CVE-2026-2441-PoC | Chrome Blink CSS Use-After-Free · CVSS 8.8 · Renderer RCE |  |
| kalkaneus | Open-source MITM proxy & web security testing platform — kalkaneus.com |  |
| CVE-2024-4577-Nuclei-Template | Nuclei template — listed on ProjectDiscovery & Vulners |  |
| oculos | If it's on the screen, it's an API. Desktop automation via REST + MCP (Rust) |  |
| FindSecrets | Secret scanning tool |  |
| Regex-Scanner-Chrome-Extension | Regex-based scanner Chrome extension |  |
| Zafiyet.AI | AI vulnerability knowledge base — MITRE ATLAS style | — |