Khaserdene.

Bug hunter. Tool builder. CVE earner.

Seeking Junior VR / Cybersecurity role. Open to full-time or part-time.

GitHubRésuméxaccefy@gmail.com
  • ▸2 CVEs PUBLISHED — 2026
  • ▸1ST PLACE · BANKSEC × MAZALA LIVE HACKING
  • ▸HACKING WITH TEAM HACKRATIC

2

CVEs published

6

Tools shipped

1st

Live hacking win

3

Writeup series

About

Curiosity that ends in a CVE number

I fuzz, reverse, and exploit. Two CVEs from custom fuzzing.

Offensive tools, agent infra, AI for defense. If it speeds a researcher, I build it.

  • Vulnerability research & binary exploitation
  • Offensive tooling & agent infrastructure
  • AI for security ops
CategorySkills
SecurityBinary exploit, Reversing, Vuln research, Disclosure, CTF
ProgrammingPython, C, Bash, JavaScript, Go
Toolspwntools, pwndbg, GDB, Ghidra, Caido, MCP servers, Git
PlatformsLinux, Docker, Networking, Cloud basics

Research

Published vulnerabilities from custom fuzzing, disclosed under coordinated disclosure.

CVETargetSeverityYear
CVE-2026-33151Socket.IOHigh2026
CVE-2026-33245React RouterHigh2026

Training grounds

PlatformFocus
CTF practicereversing, pwn, forensics, web
Hack The Boxenumeration, exploitation, privilege escalation
AI & Security Researchpaper notes, small tests, draft ideas

Projects

Tools built for the field: extensions, CLIs, and agent infrastructure.

pi-xpi terminal preview

pi-xpi

Pentest tools for Pi Agent: casefile, web search, exploit lookup, code intel.

PublishedSecurityPi extensionPentestCLI
ratic cli preview

ratic cli

Cleaner Claude Code fork for engineering and security.

Core maintainerCLIArchitectureSecurity
pi-casefile preview

pi-casefile

Bug bounty casefile. Targets, notes, evidence, all in one place.

ArchivedBug bountyEvidencePi extensionAgents
learnmax CLI preview

learnmax

Full learning loop for coding agents: learn, quiz, spaced repetition.

PublishedEducationPi extensionSpaced repetitionCLI
sweep repository preview

sweep

Lazy senior-dev mode for Pi. Stdlib before custom code. One line before fifty.

PublishedYAGNIPi extensionCode reviewCLI
Arch Linux desktop preview

Arch Linux Dotfiles

Arch and Hyprland setup for daily security.

MaintainedArch LinuxHyprlandZsh

Achievements

Competitions and research outcomes.

  • 1st

    Banksec x Mazala Live Hacking

    1st place overall.

    Banksec x Mazala

  • 2nd

    Cell Broadcast Integration

    Cell broadcast tech for mass emergency alerts. Built with team CCS.

    UB Hackathon 2026

  • 2nd

    Persistent SOC Agents

    Benchmark and concept for persistent SOC agents with memory.

    SICT Olympiad 2026 — Paper & Research

  • 7th

    AITU CTF 2026 Final

    Reached the final with HACKRATIC. Placed seventh.

    AITU CTF 2026

Writing

Notes and walkthroughs from the lab.

Contact

Junior roles, research collabs, CTF teams, or a good bug story. My inbox is open.

The form routes through your mail client. Or write to me directly.

xaccefy@gmail.com