skeletonsec

ahmed ibrahim

vulnerability research · exploit development · reverse engineering

now

hunting 0/1/N-days — source audit, fuzzing, protocol & memory bugs web · native · mobile · supply chain
building open tools for the work, in the open everything here ships with evidence or it doesn't ship

projects

authprobe record once, scan authenticated — session record/refresh/export for DAST in CI
skelet0n glass-box research conductor — staged hunts, tamper-evident evidence ledger

research

// nothing published yet. the first writeups are in the pipe —
// when they land, they'll land with proof. see research.