~/ABOUT · THE HUMAN BEHIND THE HEXCurious by default.
Curious by default.
Low-level by choice.
知ることは、強くなること。
To learn is to grow stronger.StrawHat / cybersecurity-focused engineer
Pwner @ 0xL4ughVulnerability research & fuzzing
Yo, I’m 0xStrawHat, a cybersecurity-focused engineer. I take software apart, question its assumptions, and follow interesting crashes back to the source.
This is where I leave the things I learn: vulnerability research, debugging detours, and notes worth sharing with the next curious person.
Where I dig.
Vulnerability research
Following unexpected behavior back to the assumption that broke.
Binary exploitation
Memory, primitives, and the details hiding below the abstraction.
Fuzzing
Interesting inputs. Strange crashes. A debugger waiting nearby.
Research on record.
Discovered, analyzed, and responsibly disclosed.
- GHSA-9rpj-3789-2645libyangCVSS 3.1 score 8.6, High
- GHSA-rrc3-9rpp-qrh5libyangModerate, no published numeric CVSS score
- CVE-2026-41907uuidCVSS 4.0 score 6.3, Moderate
- CVE-2026-5038MulterCVSS 3.1 score 5.3, Moderate
- CVE-2026-44658Zen BrowserCVSS 3.1 score 2.4, Low