Khashayar Fereidani

Resume

Objectives

Static Analysis, Application Security, Fuzzing, IDS/IPS, Optimization, Database Systems, Full-Stack Web Application Development

Education

  • Azad University of Tehran South - Master of Software Engineering (2019)
  • Azad University of Najafabad - Bachelor of Software Engineering (2014)

Skills & Experience

Security Research

  • Ethically reported vulnerabilities and participated in bug bounty programs of Yahoo!, United airlines, NASA.gov and etc.
  • Discovery of more than dozens vulnerabilities with published CVE identifiers across various software and hardware products
  • Highly experienced in designing static analysis and fuzzer tools
  • Experienced in black-box and white-box penetration testing
  • Experienced in writing Snort and Emerging Threat rules
  • Experienced in building centralized and multi-platform IDS/IPS
  • Experienced in defense against Denial of Service (DoS) attacks
  • Experienced in writing web application IDS/IPS
  • Experienced in forensic and anti-forensic sciences

Programming Languages

  • Expert in Rust and Golang
  • Highly Experienced with Node.js, Bun, PHP, C, Lua/LuaJIT and CoffeeScript
  • Experienced with C++23, TypeScript, Python and Bash

Systems & Administration

  • Experienced in PostgreSQL and MySQL server administration, configuration, optimization, and data recovery
  • Experienced in remote administration of GNU/Linux and BSD dedicated servers
  • Experienced in hardening GNU/Linux and BSD dedicated servers
  • Experienced in optimization and hardening of the Linux kernel
  • Configuration of MTAs (Postfix, Sendmail)
  • Configuration of web servers (Nginx, Apache, Lighttpd, Caddy)
  • Configuration of DNS servers (Bind, CoreDNS)
  • Configuration of VPN servers (Wireguard, OpenConnect, OpenVPN, PPTP, L2TP, SSTP, and IPSec)

Open Source Projects

Author of several high-performance Rust libraries:

  • Kanal - The fast sync and async channel that Rust deserves
  • RcLite - Small, fast, and memory-friendly reference counting for Rust
  • xutex - An extremely fast async mutex with alternative sync API

See Projects for the full list.