(Kirubel)
Sup, I am a security researchers and a software engineer, I love to break things and just see how and to what level they function, I mostly focus on Offensive security at low-level to check if I can get buffer overflow on the software and develop apps, websites, and API, but on my free time I try to make some digital arts like 3D designs, posters and drawings.
Core Projects
Serverless Edge-Native Threat Intelligence Dashboard
A serverless, edge-native dashboard that aggregates live CVEs, exploits, and security news into a single stream. Built entirely on Cloudflare Workers and D1 for sub-millisecond latency without traditional backend bloat. It features a zero-trust, completely anonymous authentication model requiring a strict 128-character cryptographic passphrase, guaranteeing full user privacy with zero ad tracking.
Dynamic runtime SBOM generator for Linux
Non-invasive runtime Software Bill of Materials (SBOM) generation engine. The system derives component identity, linkage, and cryptographic integrity assertions natively from the Linux kernel virtual filesystem (VFS) and tracer subsystems, eliminating userspace injection, application instrumentation, or static manifest approximation.
Lightweight ELF Tracing & Instrumentation Engine
ZeroShadow is a lightweight C++ engine for tracing and instrumenting ELF binaries. It gives you raw, low-level visibility into how a program runs, allowing you to hook functions, trace execution paths, and analyze binaries without the bloat of heavy runtimes. Built for both CLI analysis and direct integration into your own tools as a library.
Automated Security Auditing Ecosystem & Penetration Tester
KASCVE is an automated security audit software for websites that tests your website for known CVE'S and Top 10 OWASP vulnerability with an addition of active penetration test such as SQL Injection and some others. A platform made for both desktop and android.
A lightweight offline static analysis utility to scan local ALPM metadata & AUR helper build caches for compromised packages and suspicious code patterns.
A lightweight offline static analysis tool to scan local ALPM metadata and AUR helper build caches for heuristic anomalies and known threat signatures.
Secure Linux Architecture
Architected a highly optimized, Arch-based Linux distribution engineered from the kernel up to drastically reduce attack surfaces while maintaining maximum developer velocity. Developed custom Python and Bash automation frameworks to handle system localization, automated provisioning pipelines, and granular cryptographic storage layouts.
rlottie Media Engine Fuzzing Research
Independent remote research focused on stress-testing the rlottie media engine. Engineered an automated fuzzing harness utilizing AFL++ to execute systematic crash analysis, successfully isolating potential memory corruption vulnerabilities, input validation failures, and hidden memory leaks within third-party messaging integrations.
Terminal-Based 3D Rendering Engine in C++
Implementing a 3D donut animation rendered entirely in the terminal using C++. Developed raw mathematical rendering algorithms and strict memory management constraints without relying on external graphical or rendering libraries.
HTB Environments
Full documented
My Poster designs and 3D renders.
Engineered and optimized backend software architectures within a formal Software Development Life Cycle (SDLC). Automated critical production infrastructure using Python, enforcing secure version control integrity and codebase hardening. Collaborated asynchronously with distributed teams to defend application logic against injection flaws and maximize server throughput.