At Whirly Labs, I lead client-facing vulnerability research and exploitability-focused assessments across web, desktop, and console applications, routers, and other targets. I build bespoke proof-of-concept and full-chain exploits to validate impact and support root-cause analysis.
My research spans source-assisted and black-box analysis across Windows, Linux, Android, routers, desktop software, and backend services. Public work includes multiple CVEs and published exploit tooling, alongside NDA-protected memory-corruption, local privilege-escalation, and remote-code-execution findings.
At Orange Cyberdefense, I conducted penetration tests and security assessments of web applications and client networks, applying OWASP testing methods and documenting findings with reproduction steps and remediation recommendations.
I’ve also reverse engineered Windows applications, supported cybersecurity work for law-enforcement-facing projects, and presented research at BSides Johannesburg. My technical work includes Python, C, reverse engineering, and low-level debugging.
