Testing

Clickjacking playbook.

CORS misconfiguration testing playbook.

CSRF testing playbook.

Supply-chain testing via package-manager dependency confusion.

Reconnaissance and methodology playbook.

HTTP request smuggling and desynchronization testing.

Unauthorized access triage for exposed common services.

Set up and manage local Kubernetes clusters using KIND (Kubernetes IN Docker).

Sets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer.

Sets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects.

Builds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic bytes, and tokens a target expects.

Build a tight, red-capable feedback loop before diagnosing failures, then minimize, test ranked hypotheses, and lock the fix with a regression test.

Feature verification (READ-ONLY, P0-P5).

Smart contract security testing and blockchain CTF exploitation.

Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.

Builds, runs, and debugs Nextflow DSL2 pipelines and nf-core workflows.

Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.

Provides Python/HTSlib workflows for genomic files.

API fuzzing for bug bounty.

HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing.

Disciplined diagnosis loop for hard problems, diagnosing bugs and regressions.

Extract structured data from Axure prototypes using Playwright — screenshots, design tokens, interaction maps, annotations, and page text.

End-to-end LLM accuracy evaluation on AMD ROCm (ROCm-only) — container setup, vLLM/SGLang/ATOM serving, lm-eval / lighteval / evalscope benchmarks.

End-to-end LLM accuracy evaluation on AMD ROCm (ROCm-only) — container setup, vLLM/SGLang/ATOM serving, lm-eval / lighteval / evalscope benchmarks.