vrdq
I'm a systems developer and security researcher based in Cairo, Egypt. My focus is on digital forensics, process memory inspection, and low-level Linux systems programming in C. I investigate running processes for injected code and execution artifacts, analyze protocol packet timing, and build secure full-stack software and tools.
Outside programming, I've been a kickboxing athlete for a couple of years in Giza and a tier tester in the Vanilla Tier List (peak HT3 Vanilla, currently LT3).
Featured Work
A full-stack telemedicine and appointment booking platform built with TypeScript, React 19, Express 5, and PostgreSQL. Features strict role-based access control (RBAC), database transaction-level locking to prevent double-booking and concurrency race conditions, Zod schema validation to eliminate untrusted injection vectors, and bilingual Arabic/English RTL support.
A native Wayland crosshair overlay daemon written in C (C99) using layer-shell with input passthrough. It bypasses legacy X11 security flaws (where arbitrary clients can snoop global keystrokes and mouse events) by adhering strictly to Wayland's isolated surface protocol, and catches SIGUSR1 to reload configuration dynamically in memory.
A terminal music player I built with Textual that streams tracks from YouTube Music while syncing Spotify playlists without Spotify Premium. It controls a background mpv daemon over a secure Unix domain socket, renders a 60 FPS spectrum visualizer via cava, and connects to MPRIS 2 for desktop media keys. Published on PyPI and featured on Awesome TUI.
A Discord-to-Minecraft synchronization bot and Paper plugin in Java 21. Prevents player identity spoofing by resolving immutable Mojang UUIDs against official REST APIs, enforces privilege isolation by restricting administrative commands to secure ticket channels, and maintains tamper-evident audit logs.
A Discord bot I made that queries multiple tier list APIs to check verified player ranks, resolving Minecraft usernames to permanent Mojang UUIDs to prevent name-spoofing and rank tampering.
A Brave and Chromium extension I wrote that forces JetBrains Mono across all webpage text. It walks DOM text nodes and observes mutations to pierce Shadow DOM trees and style dynamic SPAs without clobbering icon fonts, SVG glyphs, or code blocks.
My personal Arch Linux and CachyOS setup, tuned for low input latency with tearing and direct scanout for full-screen games. Centered around a dark Oxocarbon palette with an automated symlink installer and rollback script.
Recent Commits
Recent commits pushed across my active projects. Select a repository to inspect changes.
Digital Forensics and Security Operations
I conduct live memory forensics, incident response, and anti-cheat threat detection for competitive servers:
- Live Forensic Triage (Cpvpprac): Monitored TotemGuard packet telemetry to isolate packet injection attacks from network jitter, and conducted live screenshare forensics—analyzing running JVM thread stacks (
jstack), dumping process memory strings via System Informer for cheat hook signatures, and inspecting Windows Prefetch, BAM registry keys, and NTFS$UsnJrnlfor deleted or timestomped loaders. - Incident Investigation (Decree SMP & EgyPrac): Led security investigations into doxxing threats, harassment, and server disruption, correlating account histories, Discord identifiers, and IP subnets to identify threat actors.
- Integrity Forensics (VanillaPvp Club): Reviewed match video captures and telemetry for reach anomalies, unnatural aim angles, and input automation.
- Mechanical Integrity (Vanilla Tier List): Benchmarked input cadence, crystal/anchor placement rates, and reaction latencies against physiological thresholds to identify hardware and software macros.
Detailed technical breakdown on the digital forensics and security operations page.
Contact
- Email: vrdq@vrdq.dev
- GitHub: github.com/vrdq
- Discord:
vrdq.dev - Resume: vrdq.dev/resume
- Location: Cairo, Egypt (UTC+3)