Expertise & Recognition
A snapshot of my qualifications and contributions to the security community — industry certifications, published CVEs, and recognition from bug bounty programs.
Certifications
OSCE3
Offensive Security Certified Expert 3
OffSec's expert-level certification, earned by holding the three certifications below.
OSWE
Offensive Security Web Expert
OSEP
Offensive Security Experienced Penetration Tester
OSED
Offensive Security Exploit Developer
OSAI+
OffSec AI Red Teamer (Advanced)
OSAI
OffSec AI Red Teamer
CVEs
Security vulnerabilities I have discovered and responsibly disclosed. Each links to its full entry in the National Vulnerability Database.
PgBouncer
Missing validation in the SCRAM client-final-message parser lets an unauthenticated attacker crash the process via a NULL pointer dereference before any credential is verified.
2026PostgreSQL
psql \unrestrict lets a malicious superuser of the pg_dump origin server inject arbitrary code for execution when the dump is restored via psql.
2026PostgreSQL Anonymizer
Privilege escalation to superuser via a malicious custom operator placed in the public schema.
2026PostgreSQL Anonymizer
Privilege escalation to superuser via a temporary view abusing anon.get_tablesample_ratio.
2026Android (AOSP)
Local privilege escalation via a logic error in UpdateFetcher allowing a malicious config update.
2024Recognition
Active on leading bug bounty platforms, reporting vulnerabilities to organisations worldwide.
