Skip to content
View RinZ27's full-sized avatar
40 followers · 0 following

Achievements

Achievement: Pull Sharkx3Achievement: Pair Extraordinairex3Achievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pull Sharkx3Achievement: Pair Extraordinairex3Achievement: YOLOAchievement: Quickdraw

Highlights

Organizations

@embeddedos-org

Block or report RinZ27

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
RinZ27/README.md

Typing SVG


GitHub followers Profile Views PRs CVEs

▸ whoami

Based in Vietnam. Mostly just reading source code all day and breaking stuff to see what falls apart. Got lucky digging through django-unicorn — found a state manipulation bug that turned into CVE-2026-31815.

When not hunting bugs, I'm throwing patches at whatever catches my eye on GitHub.

🎯 Attack Surface:

  • 🔓 Vuln Research — source auditing, logic bug hunting
  • 🛠️ OSS Patches — langchain, ray, sktime, tldr-pages, ...
  • 🧪 Tooling — custom audit scripts, automated scanners
  • 🐍 Stack — Python, Go, JS/TS, Bash

▸ cat /var/log/targets.log

stuff that got merged, stuff still cooking

Target Operation Status
langchain 🔧 Fix tool_outputs validation mismatch in core Merged
ray 📦 Patch axios dependency in dashboard Merged
sktime 🐛 Fix F1 score division by zero in ClaSP Open
aibrix 🧹 Deduplicate session affinity header constants Open
stella 🧪 Add unit tests for array normalizers & color helpers Merged
django-unicorn 💀 CVE-2026-31815 — State manipulation flaw CVE

▸ lsmod | grep arsenal



🔍 Offensive 🛡️ Defensive ⚙️ Infrastructure

CodeQL Semgrep Nuclei Slither Aderyn Burp Suite

SAST/DAST Dependency Audit CVE Research Patch Engineering

Docker GitHub Actions CI/CD Pipelines Linux

▸ cat /proc/stats



github-snake



▸ netstat -an | grep ESTABLISHED



┌──────────────────────────────────────────────────────────────┐
│  "The quieter you become, the more you are able to hear."   │
│                                          — Kali Linux       │
└──────────────────────────────────────────────────────────────┘

Pinned Loading

  1. django-commons/django-unicorn django-commons/django-unicorn Public

    The magical reactive component framework for Django ✨

    Python 2.7k 131

  2. HKUDS/DeepTutor HKUDS/DeepTutor Public

    DeepTutor: Lifelong Personalized Tutoring. https://deeptutor.info/.

    Python 37.5k 4.7k

  3. GoogleChrome/chrome-extensions-samples GoogleChrome/chrome-extensions-samples Public

    Chrome Extensions Samples

    JavaScript 17.7k 9k

  4. IBM/mcp-context-forge IBM/mcp-context-forge Public

    An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool c…

    Python 4.4k 835

  5. harvard-edge/cs249r_book harvard-edge/cs249r_book Public

    Machine Learning Systems

    Python 28k 3.5k

  6. nasa/openmct nasa/openmct Public

    A web based mission control framework.

    JavaScript 13.1k 1.5k