Nofil Qasim

Vulnerability researcher with experience in exploit development, vulnerability discovery, mitigation bypass, and exploit analysis. I mainly work on Linux and UNIX systems and research 0-days in proprietary software through private disclosure. I have also worked on evasive malware for Windows. Publicly disclosed findings include a sudo intercept bypass, a stack-based buffer overflow in Coinbase’s MPC library, and a heap-based out-of-bounds write in Steam Audio. My interests include binary exploitation, kernel vulnerabilities, interpreter and runtime security, WASM security, microarchitectural security, and systems programming.