I specialize in finding real-world, high-impact vulnerabilities through deep source-code review (logic flaws, supply-chain risks, CI/CD hardening), then shipping clear reports + reproducible evidence and secure patches.
- 🔎 Focus: Source Code Security Review (logic flaws, authZ/authN gaps, injection, unsafe defaults, supply-chain)
- 🛠️ I deliver: PoC (safe), exploitability analysis, and fix PRs with regression notes
- 🌱 Currently leveling up: systems security (Linux internals, hardening, secure-by-design patterns)
- 🤝 Open to collaborate on: OSS security fixes, VDP / bug bounty research, and security tooling
- 💬 Ask me about: vulnerability research workflow, writing high-signal reports, CVE/advisory process
- 📫 Reach me: alishmery18@gmail.com
