Security researcher
I'm a security researcher focused on vulnerability research in open-source software and AI/LLM security.
My work involves analyzing open-source libraries to identify security vulnerabilities, understand their underlying causes, and investigate how they can be exploited in practice.
- Vulnerability research in open-source libraries: finding new bugs, reproducing and analysing public ones
- Write-ups with substance: root cause, patch review, regression tests
- AI / LLM security: attacks on and defences for LLM-based systems, including LLM-assisted penetration testing
- Open source: I contribute to open-source projects (merged PRs)
| Project | About | Stack |
|---|---|---|
| CVE-Omarchy-Plugin | Bar widget for Omarchy. Type a CVE ID or a product name and get the vulnerability description, plus the public exploits found in the local ExploitDB mirror, including their local file paths. Exploit search works offline; only the CVE description lookup uses the network. | QML, shell, searchsploit (ExploitDB), CIRCL CVE API |
| waf | WAF Dashboard: a product layer around the mature ModSecurity engine. Collects audit and access events, aggregates attack statistics, and shows them in a dashboard with a live stream. Next up: SSO, roles, and rule/policy management. | ModSecurity, nginx, OWASP CRS, ClickHouse, Docker |
| ICPC-2026-Huawei | Solution for the ICPC 2026 Huawei task, with a local test harness and tests. | C++ |
Blog: hed1ad.github.io, with vulnerability write-ups covering the vulnerable code, how to test it, and the fix.
- Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL (CVE-2026-55797, CWE-78): why
url.Parseis not input validation, a minimal Go test, and a review of the allowlist-based fix
- Application of LLM for Penetration Testing, article on elibrary.ru
- Master's thesis: A Methodology for Monitoring the Cyber Resilience of AI Technologies to Attacks at the Operational Stage (original title: «Методика мониторинга киберустойчивости технологий ИИ к атакам на этапе эксплуатации»). The practical part will be published later, soon... Results from it are already used by a company to build a product.
