vrdq
Cybersecurity, Digital Forensics & Systems Software
Technical Skills
| Security & Forensics | Process memory string triage, live JVM thread inspection, Windows artifact triage (Prefetch, BAM registry keys, NTFS $UsnJrnl), memory-injection detection, anti-tamper & evasion analysis, network packet timing variance & telemetry |
| Systems & Low-Level | C (C99/C11), Linux systems, POSIX signals, IPC (Unix domain sockets, FIFO pipes), Wayland layer-shell protocol, memory management, Bash, Fish |
| Application Security & Backend | Role-based access control (RBAC), database transaction locking & race condition mitigation, schema validation & injection prevention (Zod, parameterized SQL), REST APIs, Node.js, Express 5, PostgreSQL, Drizzle ORM |
| Languages & Tools | C, Python 3, Java 21, TypeScript, SQL, Git, Neovim, System Informer, jstack, Wireshark, bytecode inspection |
Security Operations and Incident Response
Cpvpprac
Security Operations & Anti-Cheat Forensics
- Monitored live server telemetry and TotemGuard alerts, conducting packet timing variance analysis to differentiate legitimate network jitter from injected automated cheat packets.
- Conducted live forensic triage during screenshares: analyzed running JVM thread stacks (
jstack) to detect unmapped execution threads, dumped process memory strings via System Informer for cheat hook signatures, and inspected loaded dynamic libraries (DLLs). - Parsed persistent Windows execution artifacts (
C:\Windows\Prefetch, BAM registry keys inSYSTEM\CurrentControlSet\Services\bam\State\UserSettings, and NTFS$UsnJrnl) to detect deleted or timestomped binary loaders. - Enforced network-level IP bans and correlated alternate account fingerprints to stop persistent evasion.
Decree SMP and EgyPrac
Server Security & Incident Investigation
- Led security investigations into targeted harassment, doxxing threats, and griefing attempts across active competitive servers.
- Correlated account registration timelines, UUIDs, Discord IDs, and IP subnet ranges to identify, document, and sanction offenders.
- Maintained audit logs and coordinated staff emergency response protocols during high-stakes competitive tournaments.
VanillaPvp Club
Incident Response & Match Forensics
- Triaged player dispute tickets and conducted forensic reviews of duel video captures to detect reach modifications, unnatural aim snaps, and macro automation.
- Enforced server-wide integrity policies, resolved disputed match outcomes with technical evidence, and managed appeal cases.
Vanilla Tier List (VTL)
Mechanical Verification & Integrity Tester
- Conducted structured 1v1 mechanical assessments to assign verified competitive tier rankings (LT5 to HT3, personal peak High Tier 3 / HT3 Vanilla).
- Benchmarked client input timing, crystal/anchor placement cadence, and reaction latencies against human physiological limits to identify external hardware or software macro assistance.
- Screened player clients for disallowed modifications, memory tampering, and unauthorized client builds.
Projects
MedicalBookingHub
TypeScript, React 19, Node.js, Express 5, Drizzle ORM, PostgreSQL, Tailwind CSS v4, Zod
- Architected a full-stack telemedicine platform featuring strict role-based access control (RBAC: Patients, Providers, Admins) and complete English/Arabic localization with RTL support.
- Enforced database transaction-level locking on PostgreSQL to mitigate concurrency race-condition exploits and double-booking attacks.
- Implemented strict schema validation and sanitization using Zod to eliminate untrusted input and injection vectors across all API endpoints.
- Engineered an in-app consultation channel with 2MB document payload restrictions and automated failover across transactional email providers.
Cairo Crosshair App
C (C99), Wayland layer-shell, Cairo, Qt6
- Engineered a native Linux desktop overlay daemon in C (C99) using
gtk-layer-shellon the Waylandoverlaylayer surface, with input passthrough so game clicks pass through with zero latency. - Bypassed the fundamental security flaws of legacy X11 (where unprivileged windows can snoop global clicks and keystrokes) by adhering strictly to Wayland's isolated surface protocol.
- Built a non-blocking
SIGUSR1POSIX signal handler to dynamically reload configuration in memory without process restart or state corruption. - Created a companion Qt6 GUI (
cairo-gui) that matches system themes.
Spoff
Python 3, mpv IPC, CAVA, D-Bus MPRIS 2, SQLite
- Built a TUI music player in Python, that streams from YouTube Music and pulls Spotify metadata without requiring Spotify Premium.
- Controlled playback via a background
mpvprocess over a Unix domain IPC socket. - Cached streamed audio to
~/.local/share/spoff/cache/for offline playback. - Piped audio data through a
cavaFIFO pipe to render a spectrum visualizer. - Implemented the D-Bus MPRIS 2 interface for hardware media keys, Waybar, and lockscreens.
- Published package to PyPI (
spoff) and recognized on Awesome TUI with Verified Maintainer status.
Tierlist Discord Bot
Python 3, discord.py, REST APIs, SQLite, Linux systemd
- Built a Discord bot that queries player rankings and parses live tiers across multiple Minecraft tierlist APIs.
- Integrated the Mojang REST API to resolve player IGNs to UUIDs, caching cross-roster tier history in SQLite.
- Formatted and delivered live tier statistics, ranking histories, and verified player profiles through Discord slash commands.
WhitelistLink
Java 21, Paper/Spigot API 1.21.1, JDA 5.0, Mojang REST API, Maven
- Engineered a dual-mode Discord-to-Minecraft whitelist synchronization plugin and bot in Java 21, eliminating manual admin credentials and console exposure.
- Mitigated player identity spoofing by resolving immutable Mojang UUIDs against official REST APIs before granting server access or assigning Discord roles.
- Implemented privilege isolation by restricting administrative bot execution to scoped ticket channels (e.g.
ticket-prefixes) and routed all staff interventions to an immutable audit log channel.
JetBrains Mono Everywhere (jetbrains-web)
Chromium Manifest V3, JavaScript (ES6+), CSS, DOM MutationObserver
- Built an unpacked Chromium and Brave extension to enforce JetBrains Mono across all webpage text while preserving icon fonts, code blocks, and SVG elements.
- Overrode CSS variable font tokens across design systems (Tailwind, Bootstrap, Primer) with precise
:not()selector exclusions. - Implemented DOM text-node tree traversal with
TreeWalker, Unicode PUA codepoint filtering, and dynamic Shadow DOM piercing usingMutationObserver.
Dotfiles
Arch Linux, CachyOS, Hyprland (Lua), Bash, Kitty, Fish
- Configured Hyprland with direct scanout and tearing enabled to eliminate compositor latency in full-screen games.
- Themed Neovim, Kitty, and DankMaterialShell with a unified dark monochrome Oxocarbon palette.
- Wrote an installer that backs up existing configuration files before symlinking, with an automatic rollback script.
Athletics
Kickboxing Athlete (Couple of Years)
- A couple of years of active kickboxing training, sparring, and conditioning in Giza.
Education and Background
Secondary Education
Self-taught systems and security programmer focused on digital forensics, binary analysis, Linux internals, and C. Fluent in English and Arabic.