Hi there 👋, I’m Askar!
Hi there 👋, I’m Askar!
Offensive security engineer, vulnerability researcher, and tool builder. I spend most of my time breaking things, writing about how I broke them, and building tools to break them better.
I’ve spent years working across red team engagements, vulnerability research, and exploit development. I’ve responsibly disclosed multiple vulnerabilities with full exploit code, published 20+ technical blog posts, and contributed to security education across the MENA region. Currently exploring cloud security, Windows internals, and AI-assisted vulnerability hunting.
🛠 Tools I’ve Built
- Octopus C2 — Open-source command and control framework
- DNSStager — DNS-based payload staging tool for red team operations
📝 Recent Research
- Chaining ISC DHCP Server features for unauthenticated root RCE
- CVE-2024-11320 — PandoraFMS remote code execution
- CVE-2023-0315 — Froxlor remote code execution
- Using AI services to mask C2 communications
- Abusing Tyk API management for C2 obfuscation
💬 Book a Session
Want to dive into something technical together? I offer one-on-one consultation sessions covering exploit development, red teaming, vulnerability research, career guidance, and more. Book a slot and let’s get into it.
📫 Let’s Connect
