Dostxodjayev Abdullox

Offensive Security Researcher. Pentesting, red teaming, vulnerability research.

About

Offensive security researcher focused on web application security, vulnerability research, and coordinated disclosure. I audit open-source projects for exploitable bugs, build working proof-of-concepts, and report through responsible disclosure.

Web App SecurityVulnerability ResearchRed Teaming MCP / AI-Agent SecuritySource Code AuditingResponsible Disclosure

Projects

dreddaiWIP

Started as something to kill boredom, turned into an AI assistant and hands-on learning platform for pentesters and red teamers. Chat with an AI, run real local tools through an agent, work through structured courses and zero-setup practice labs. Big ambitions, still actively evolving, expect rough edges.

dreddai.pages.dev →

Certifications

CVEs

WolfStack — Hardcoded Secret → Unauthenticated RCE

CWE-798 · CVSS 9.8

Critical

AV:NAC:LPR:NUI:NS:UC:HI:HA:H

GHSA ↗ CVE-2026-73519 (NVD) ↗ PoC ↗

emlog — CSRF → SQL Execution → Account Takeover

CWE-352 · CVSS 6.8

Medium

AV:NAC:HPR:NUI:RS:UC:HI:HA:N

GHSA ↗ CVE-2026-73847 (NVD) ↗ PoC ↗

Contact

GitHub Hack The Box Email