Selected work
Security research, engineering projects, and technical investigations.
How I reverse-engineered four Capcom Resident Evil titles on the macOS App Store, located IAP validation routines in ARM64 assembly with IDA Pro, and patched them with Python to unlock all paid DLC for free.
I reverse-engineered the client-side encryption and signing logic used by DeepSeek Chat and Gemini's web frontend, then exposed both as fully scriptable local APIs via curl and Python — bypassing UI-only rate limits.
NextScope is a CLI tool I built to crawl Next.js and other frontend applications, extract every exposed API endpoint, and flag IDOR candidates, unauthenticated routes, and information leakage — automating the recon phase of a frontend security audit.
By intercepting and mapping FoodPanda Pakistan's undocumented mobile API, I built a private CLI tool that delivers real-time restaurant deal alerts, full menu queries by price range, and direct order placement — far beyond what the official app exposes.
An account of discovering and exploiting RCE vulnerabilities in Linux-exposed services, finding IDOR and XSS in real-world web applications, and building tooling to systematise frontend security audits.
An investigation into running Bloodborne natively on Apple Silicon: shader translation, Mach-O binary loading, GPU command-buffer differences between PS4 GNM and Metal, and performance benchmarks on M1 Pro.