Security researcher finding critical bugs | Contributing to Rust OSS | Rust • Anchor • Web3
boa — Embeddable JavaScript engine written in Rust.
- Led the
EngineError::Panicmigration — converting internal panics across builtins (array, string, regexp, proxy, promise, typed_array, generator, bigint, eval, intl, vm/opcode, module/source, object) into recoverable errors. - Built out WinterTC compliance — new
boa_wintertccrate, migratingconsole,atob/btoa,structuredClone,queueMicrotask, timers, and more fromboa_runtime. - Implemented safe wrappers:
JsWeakMap,JsWeakSet,JsAsyncGenerator,JsGeneratorFunction.
omniqueue-rs — Queue abstraction layer for Rust (Redis, RabbitMQ, SQS, GCP Pub/Sub).
- Expanded test coverage across the in-memory, RabbitMQ, SQS, and GCP Pub/Sub backends.
- Fixed outdated README/doc code snippets and cleaned up backend configuration.
Security_vuln_Profile — A record of vulnerabilities discovered and responsibly disclosed across live platforms.
Severity Total Triaged
────────────────────────────
Critical 3 2
High 3 1
Medium 1 0
Findings include SQL Injection, Remote Code Execution, OTP Bypass, Reflected XSS, IDOR, and Stack Trace Exposure. Technical details withheld to protect affected systems.
CTF_Exclusive — Writeups and scripts from CTF competitions including picoCTF and PortSwigger Web Security Academy, covering web exploitation and general security skills.