Camaro

Security Researcher & Engineer
SAST Code Auditing · Web Security Vulnerability Research

---

whoami

I hunt for vulnerabilities where they start — in the source. My work centers on static application security testing (SAST): modeling data flow from untrusted sources to dangerous sinks, writing taint-tracking queries, and building tooling that scales code auditing beyond what manual review can cover. On the offensive side, I research web application vulnerability classes and turn findings into reproducible proofs of concept.

• 🔎 Auditing code with CodeQL, tree-sitter, and custom static-analysis pipelines
• 🌐 Researching web vuln classes — RCE, insecure deserialization, SSRF, XSS, LFI, auth bypass
• 🤖 Building LLM-assisted auditing and bug-bounty tooling
• 🧪 Writing PoCs that reproduce, not just claim

---

🧭 Research Interests

Area	What I dig into
Static Analysis / SAST	Source→sink taint tracking, CodeQL query design, tree-sitter parsing, custom extractors, false-positive reduction
Web Vulnerability Research	RCE & command injection, Java/JSON deserialization (e.g. Fastjson-class chains), SSRF, XSS, LFI/path traversal, ACL/auth bypass
Bug Bounty Automation	Recon pipelines, attack-surface mapping, one-liner tooling, MCP-driven scanners
Offensive Tooling	Post-exploitation, C2 design, token/credential handling, red-team utilities
AI for Security	LLM agents as code-audit assistants, retrieval over large codebases, agentic vuln triage

---

🧰 Toolbox

---

Look is my dad.