I'm Ahmed Abdessamed KOBBI (aka DZxZeroDay) — a Cybersecurity Expert, Software Developer, and IT Systems Engineer based in Bab Ezzouar, Algeria. I secure and ship systems for enterprise groups.
I work in the IT department of a large enterprise group, building and hardening systems used across subsidiaries and regional units. Day to day that means infra, internal apps, and security reviews — often under NDA.
On the research side, I reverse binaries, analyze malware, and run vulnerability assessments. On the build side, I ship desktop and web tools teams actually use: ERP workflows, HR documents, document management, licensing platforms, and biometric authentication SaaS.
|
|
| Repository | Visibility | Description | Tech Stack |
|---|---|---|---|
| veriface | 🌐 Public | Privacy-first facial authentication SaaS with post-quantum crypto, ZK proofs, 8 SDKs, military-grade security (OWASP 10/10 PASS, 88 findings fixed) | TypeScript, Next.js 16, Prisma, Ed25519, ML-DSA-87, PLONK, Docker, K8s, Redis, PostgreSQL |
| Posidon_Licensing_Server | 🌐 Public | Production-grade licensing, entitlement & authentication platform with RBAC, GraphQL, customer portal, webhook retry queue, audit log, MFA | Next.js 16, Prisma, GraphQL, RBAC, MFA, Webhook Queue, Audit Log |
| vmpscope | 🔒 Private | Multi-tenant SaaS for automated VMProtect unpacking & analysis. 13-phase pipeline, token-based billing, STIX 2.1 export, military-grade security (10 vulns fixed in pentest audit) | Python 3.12, FastAPI, Next.js 16, PostgreSQL (RLS), Redis, Celery, MinIO, Argon2id, Ed25519, AES-256-GCM, Docker, K8s, Stripe |
| epe-tvc-webapp | 🔒 Private | EPE TVC public website & admin CMS with content management, SEO optimization, and responsive design | Next.js, TypeScript, Tailwind CSS, Prisma, PostgreSQL |
| OrdreDeMissionGenerator | 🔒 Private | Automated generation of mission orders, payment orders, attribution letters, and account tables for enterprise HR | C#, .NET 8, WPF, MVVM, QuestPDF |
| APKPopupInjector | 🔒 Private | Android APK analysis tool — injects popup dialogs into APKs for dynamic analysis and reverse engineering | Android APK Reverse Engineering |
| portfolio | 🔒 Private | DZxZeroDay cybersecurity & software portfolio with project showcases, security writeups, and service offerings | Next.js, TypeScript, Tailwind CSS |
| Project | Status | Problem | Approach | Stack |
|---|---|---|---|---|
| Enterprise ERP Platform | In Production | Multi-site ops needed one system for workflows, inventory, and reporting | Customized Perfex CRM with REST integrations and BI views | Perfex CRM PHP MySQL REST API BI |
| ENTERPRISE_ODM (OrdreDeMissionGenerator) | In Production | HR mission orders were slow and hard to print to official standards | WPF/.NET 8 desktop app with MVVM and QuestPDF for pixel-accurate documents | WPF .NET 8 C# QuestPDF MVVM |
| Enterprise GED Platform | In Production | Documents lacked controlled access, version history, and auditability | React/Express/MongoDB with RBAC, search, versioning, audit logs | React Express Node.js MongoDB RBAC |
| EPE TVC WebApp | In Production | Enterprise needed a public-facing website with admin CMS and SEO | Next.js + TypeScript + Tailwind CSS + Prisma + PostgreSQL | Next.js TypeScript Prisma PostgreSQL CMS |
| Posidon_Licensing_Server | Open Source | Software vendors need licensing, entitlement, and auth in one platform | Next.js 16 + Prisma + GraphQL + RBAC + MFA + webhook retry queue | Next.js Prisma GraphQL RBAC MFA |
| veriface | Open Source | Face auth without raw biometric data leaving the device | On-device crypto + ZK proofs + server-side signing proxy + 8 SDKs | TypeScript Ed25519 ML-DSA-87 PLONK Docker K8s |
| vmpscope | 🔒 Private | Analysts need automated VMProtect unpacking without infrastructure | Multi-tenant SaaS with 13-phase analysis pipeline, token billing, WebSocket live updates, STIX 2.1 export, sandboxed Docker execution, 10 vulns fixed in pentest audit | Python FastAPI Next.js PostgreSQL-RLS Redis Celery Argon2id Ed25519 AES-256-GCM Stripe |
| Project | Status | Problem | Approach | Stack |
|---|---|---|---|---|
| APKPopupInjector | 🔒 Private | Dynamic APK analysis needed custom dialog injection for runtime behavior testing | Android APK patching tool that injects popup dialogs for analysis and reverse engineering | Android APK Smali Reverse Engineering |
| Portfolio | 🔒 Private | Cybersecurity portfolio needed to showcase writeups, projects, and services | Next.js with project showcases, security writeups, service offerings | Next.js TypeScript Tailwind CSS |
| Project | Problem | Approach | Stack |
|---|---|---|---|
| ATHAR AI | Field archaeologists needed symbol classification without cloud connectivity | Flutter + on-device TensorFlow Lite models for real-time inscription classification | Flutter Dart TFLite ML |
| SOC Operation Dashboard | Real-time security monitoring needed for enterprise | Threat feeds, firewall telemetry, resource logs, attack visualization | React Real-time Security Dashboard |
| Category | Severity | Title | Target | Tags |
|---|---|---|---|---|
| Pentest | CRITICAL (CVSS 9.8) | Linux Kernel eBPF Subsystem Ring 0 Memory Write | Linux Kernel 6.12 | CVE-2026-21890 eBPF LPE Verifier Bug |
| Malware | CRITICAL (CVSS 9.8) | LockBit Ransomware V3 Binary Dissection | Win32 PE64 | LockBit 3.0 Anti-Debug IOCP Encryption |
| Reverse | HIGH (CVSS 8.8) | Kernel-Mode Rootkit Driver Extraction (BYOVD) | Windows Ring 0 | BYOVD SSDT Hooking Ghidra |
| Malware | CRITICAL (CVSS 9.1) | Qakbot Malware DLL Side-Loading & Anti-EDR | Windows x64 | Qakbot DLL Side-Loading EDR Evasion |
| Malware | HIGH (CVSS 8.4) | Android Banking Trojan Unpacking & Deobfuscation | Android DEX | Anubis Frida Hooking APK Unpacking |
| General | HIGH | APK Patching, Modding & Reverse Engineering | Android | reverse patching modding |
Full writeups at: portfolio-eldn.vercel.app/en
| Lane | What I Do |
|---|---|
| Penetration Testing | Network, web, and mobile app security assessments with full reporting |
| Vulnerability Assessment | Systematic security audits with CVSS scoring and remediation guidance |
| Reverse Engineering | APK/WinPE reversing, unpacking, devirtualization, and deobfuscation |
| Malware Analysis | Static and dynamic analysis of ransomware, trojans, rootkits, and EDR evasion |
| Desktop & Web Development | Enterprise apps (ERP, GED, HR, licensing) with production-grade security |
| Post-Quantum Cryptography | ML-DSA-87, ZK proofs, FIPS 140-3 readiness, and key management |
| IT Infrastructure | Multi-site network design, server admin, and enterprise ops |
| Custom Apps | Tailored software solutions for enterprise workflows |
© 2026 Ahmed Abdessamed KOBBI (DZxZeroDay) · Cybersecurity Expert · Software Developer · Based in Bab Ezzouar, Algeria
Location: Bab Ezzouar, Algeria · PGP: B6C7E2D1 · Built with Next.js & passion
Location: Bab Ezzouar, Algeria · PGP: B6C7E2D1 · Built with Next.js & passion