Skip to content
View zulfff's full-sized avatar
11 followers · 12 following

Achievements

Achievement: QuickdrawAchievement: Pull Sharkx2Achievement: Pair Extraordinairex2Achievement: YOLO

Achievements

Achievement: QuickdrawAchievement: Pull Sharkx2Achievement: Pair Extraordinairex2Achievement: YOLO

Block or report zulfff

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
zulfff/README.md

XERJ Corpus Hub contributor

HackerOne Bugcrowd Intigriti X / Twitter

👋 About

I hunt vulnerabilities in widely used open-source infrastructure and report them responsibly. My focus is memory-safety bugs in C libraries (TLS stacks, post-quantum crypto), plus web and API bug bounty on the side.

🏆 CVE Discoveries

CVE Product Type Severity
CVE-2026-5188 wolfSSL X.509 SAN parser Integer Underflow 🟠 8.1 High
CVE-2026-3229 wolfSSL add_to_chain Heap Buffer Overflow 🟡 5.5 Medium
CVE-2026-44518 liboqs XMSS verify OOB Read (CWE-125) 🟡 5.5 Medium

Patched 3 CVEs wolfSSL | liboqs

🚀 Featured Projects

fortress-ws SubHost-demo

envforge Logic-Collision-Detector

🛠️ Arsenal

Tech stack

ffuf nuclei amass ghidra radare2 bloodhound impacket

📊 GitHub Stats

GitHub stats Top languages

Streak stats

🐍 Contribution Snake

Contribution snake

📫 Connect

Email LinkedIn X

"If you like my work, star the repo."

Pinned Loading

  1. envforge envforge Public

    zero-dependency config manager with validation, hot reload, auto secret masking & CLI tools. stops config bugs before they hit prod.

    TypeScript

  2. Logic-Collision-Detector Logic-Collision-Detector Public

    Find hidden logic contradictions in your codebase before they turn into production bugs.

    TypeScript

  3. rust rust Public

    Forked from rust-lang/rust

    Empowering everyone to build reliable and efficient software.

    Rust

  4. FortressCommunity/FortressWAF FortressCommunity/FortressWAF Public

    FortressWAF - Self-Hosted WAF & API Security Gateway. Enterprise Web Application Firewall with ML-powered threat detection, GraphQL/WebSocket/mTLS inspection, hot-reload config, SIEM export, and re…

    Rust 5 2

  5. argus argus Public

    ARGUS — Next-gen eBPF firewall & router automation platform. XDP packet filtering, NetBox/VyOS reconciliation, AI anomaly detection, ZTNA WireGuard mesh, and full observability — all in Rust.

    Rust 7 1