vrdq

Cybersecurity, Digital Forensics & Systems Software
Email: vrdq@vrdq.dev Cairo, Egypt (UTC+3) GitHub: github.com/vrdq Discord: vrdq.dev Web: vrdq.dev

Technical Skills

Security & Forensics Process memory string triage, live JVM thread inspection, Windows artifact triage (Prefetch, BAM registry keys, NTFS $UsnJrnl), memory-injection detection, anti-tamper & evasion analysis, network packet timing variance & telemetry
Systems & Low-Level C (C99/C11), Linux systems, POSIX signals, IPC (Unix domain sockets, FIFO pipes), Wayland layer-shell protocol, memory management, Bash, Fish
Application Security & Backend Role-based access control (RBAC), database transaction locking & race condition mitigation, schema validation & injection prevention (Zod, parameterized SQL), REST APIs, Node.js, Express 5, PostgreSQL, Drizzle ORM
Languages & Tools C, Python 3, Java 21, TypeScript, SQL, Git, Neovim, System Informer, jstack, Wireshark, bytecode inspection

Security Operations and Incident Response

Cpvpprac
Security Operations & Anti-Cheat Forensics
  • Monitored live server telemetry and TotemGuard alerts, conducting packet timing variance analysis to differentiate legitimate network jitter from injected automated cheat packets.
  • Conducted live forensic triage during screenshares: analyzed running JVM thread stacks (jstack) to detect unmapped execution threads, dumped process memory strings via System Informer for cheat hook signatures, and inspected loaded dynamic libraries (DLLs).
  • Parsed persistent Windows execution artifacts (C:\Windows\Prefetch, BAM registry keys in SYSTEM\CurrentControlSet\Services\bam\State\UserSettings, and NTFS $UsnJrnl) to detect deleted or timestomped binary loaders.
  • Enforced network-level IP bans and correlated alternate account fingerprints to stop persistent evasion.
Decree SMP and EgyPrac
Server Security & Incident Investigation
  • Led security investigations into targeted harassment, doxxing threats, and griefing attempts across active competitive servers.
  • Correlated account registration timelines, UUIDs, Discord IDs, and IP subnet ranges to identify, document, and sanction offenders.
  • Maintained audit logs and coordinated staff emergency response protocols during high-stakes competitive tournaments.
VanillaPvp Club
Incident Response & Match Forensics
  • Triaged player dispute tickets and conducted forensic reviews of duel video captures to detect reach modifications, unnatural aim snaps, and macro automation.
  • Enforced server-wide integrity policies, resolved disputed match outcomes with technical evidence, and managed appeal cases.
Vanilla Tier List (VTL)
Mechanical Verification & Integrity Tester
  • Conducted structured 1v1 mechanical assessments to assign verified competitive tier rankings (LT5 to HT3, personal peak High Tier 3 / HT3 Vanilla).
  • Benchmarked client input timing, crystal/anchor placement cadence, and reaction latencies against human physiological limits to identify external hardware or software macro assistance.
  • Screened player clients for disallowed modifications, memory tampering, and unauthorized client builds.

Projects

MedicalBookingHub
TypeScript, React 19, Node.js, Express 5, Drizzle ORM, PostgreSQL, Tailwind CSS v4, Zod
  • Architected a full-stack telemedicine platform featuring strict role-based access control (RBAC: Patients, Providers, Admins) and complete English/Arabic localization with RTL support.
  • Enforced database transaction-level locking on PostgreSQL to mitigate concurrency race-condition exploits and double-booking attacks.
  • Implemented strict schema validation and sanitization using Zod to eliminate untrusted input and injection vectors across all API endpoints.
  • Engineered an in-app consultation channel with 2MB document payload restrictions and automated failover across transactional email providers.
Cairo Crosshair App
C (C99), Wayland layer-shell, Cairo, Qt6
  • Engineered a native Linux desktop overlay daemon in C (C99) using gtk-layer-shell on the Wayland overlay layer surface, with input passthrough so game clicks pass through with zero latency.
  • Bypassed the fundamental security flaws of legacy X11 (where unprivileged windows can snoop global clicks and keystrokes) by adhering strictly to Wayland's isolated surface protocol.
  • Built a non-blocking SIGUSR1 POSIX signal handler to dynamically reload configuration in memory without process restart or state corruption.
  • Created a companion Qt6 GUI (cairo-gui) that matches system themes.
Spoff
Python 3, mpv IPC, CAVA, D-Bus MPRIS 2, SQLite
  • Built a TUI music player in Python, that streams from YouTube Music and pulls Spotify metadata without requiring Spotify Premium.
  • Controlled playback via a background mpv process over a Unix domain IPC socket.
  • Cached streamed audio to ~/.local/share/spoff/cache/ for offline playback.
  • Piped audio data through a cava FIFO pipe to render a spectrum visualizer.
  • Implemented the D-Bus MPRIS 2 interface for hardware media keys, Waybar, and lockscreens.
  • Published package to PyPI (spoff) and recognized on Awesome TUI with Verified Maintainer status.
Tierlist Discord Bot
Python 3, discord.py, REST APIs, SQLite, Linux systemd
  • Built a Discord bot that queries player rankings and parses live tiers across multiple Minecraft tierlist APIs.
  • Integrated the Mojang REST API to resolve player IGNs to UUIDs, caching cross-roster tier history in SQLite.
  • Formatted and delivered live tier statistics, ranking histories, and verified player profiles through Discord slash commands.
WhitelistLink
Java 21, Paper/Spigot API 1.21.1, JDA 5.0, Mojang REST API, Maven
  • Engineered a dual-mode Discord-to-Minecraft whitelist synchronization plugin and bot in Java 21, eliminating manual admin credentials and console exposure.
  • Mitigated player identity spoofing by resolving immutable Mojang UUIDs against official REST APIs before granting server access or assigning Discord roles.
  • Implemented privilege isolation by restricting administrative bot execution to scoped ticket channels (e.g. ticket- prefixes) and routed all staff interventions to an immutable audit log channel.
JetBrains Mono Everywhere (jetbrains-web)
Chromium Manifest V3, JavaScript (ES6+), CSS, DOM MutationObserver
  • Built an unpacked Chromium and Brave extension to enforce JetBrains Mono across all webpage text while preserving icon fonts, code blocks, and SVG elements.
  • Overrode CSS variable font tokens across design systems (Tailwind, Bootstrap, Primer) with precise :not() selector exclusions.
  • Implemented DOM text-node tree traversal with TreeWalker, Unicode PUA codepoint filtering, and dynamic Shadow DOM piercing using MutationObserver.
Dotfiles
Arch Linux, CachyOS, Hyprland (Lua), Bash, Kitty, Fish
  • Configured Hyprland with direct scanout and tearing enabled to eliminate compositor latency in full-screen games.
  • Themed Neovim, Kitty, and DankMaterialShell with a unified dark monochrome Oxocarbon palette.
  • Wrote an installer that backs up existing configuration files before symlinking, with an automatic rollback script.

Athletics

Kickboxing Athlete (Couple of Years)
  • A couple of years of active kickboxing training, sparring, and conditioning in Giza.

Education and Background

Secondary Education

Self-taught systems and security programmer focused on digital forensics, binary analysis, Linux internals, and C. Fluent in English and Arabic.