As a freelance security researcher, penetration tester, and OSINT investigator, I discovered an SSRF vulnerability in Istio and was credited in its official 1.20.0 release notes. I also identified a novel CSRF attack vector in Angular Service Worker and an XSS vulnerability in the Istio website.
My investigations include reconstructing malware infection chains, analyzing network and Windows logs, and mapping threat activity to MITRE ATT&CK. I’ve completed 40+ DFIR and OSINT investigations, ranked in the top 0.05% globally on Hack The Box, and published three technical posts with 1,000+ combined views.

