I am an undergraduate cyber security student at FAST National University Karachi, Pakistan.
I am interested in software and system security, with a focus on vulnerability research, fuzz testing, and low-level binary analysis.
In addition, I enjoy playing Capture The Flag (CTF) competitions and document things I learn.
For more information, please check my CV.
Introducing docker hub container hafizfarhad/reconbox for automated reconnaissance and vulnerability discovery.
Please note that this is how I do recon and vulnerability discovery. So, I have tried to automate this whole process.
You can find code at github.com/hafizfarhad/reconbox or you can just pull the container from docker hub:
docker pull hafizfarhad/reconboxContributed to capa, Mandiant’s open-source malware analysis framework used by reverse engineers, and threat analysts globally.
Refactored the TCP socket connection rule in capa-rules to improve modularity.
Extracted a generic “connect socket” rule then composed TCP and UDP rules on top of it.
Authored a new UDP connect rule (previously absent) by pairing it with the existing “create UDP socket” rule.
Added a UDP test binary to capa-testfiles to validate the new rule, ensuring it fires accurately during analysis.
PRs merged: capa-rules#1017, capa-testfiles#280