GUIAR OQBA
Low-level systems programmer (C / C++ / Assembly) and cybersecurity researcher focused on uncovering real-world vulnerabilities via advanced fuzzing (AFL++) and building fast, practical software.
Who I Am & What I Do
I am GUIAR OQBA, a low-level programmer and offensive cybersecurity specialist. My primary discipline is vulnerability research and advanced fuzzing — combining manual C/C++ source code auditing with coverage-guided fuzzing tools like AFL++ and custom-built fuzzing engines to discover deep flaws in real-world software.
My security research has led to officially acknowledged vulnerability fixes in major open-source codebases including Samba (CTDB socket subsystem) and Zero-Breach. Alongside security auditing and C/Assembly development, I also build fast, user-friendly mobile applications such as El Kantara PDF Reader on Google Play.
GUIAR OQBA
Systems & Vulnerability Researcher
Low-Level Systems & Vulnerability Discovery
AFL++ Fuzzing • C/C++/ASM • Mobile Apps
Verified Achievements & Milestones
Documented vulnerability acknowledgments, published mobile applications, and low-level engines.
Zero-Breach Vulnerability Discovery & Official Credit (@okba14)
Vulnerability DiscoveryDiscovered and reported a security vulnerability in the Zero-Breach project on GitHub. The fix was merged upstream with official security attribution to @okba14.
Launched El Kantara PDF Reader on Google Play Store
Mobile App ReleaseEngineered and published El Kantara PDF Reader on Google Play—a fast, lightweight, and user-friendly mobile application for reading and managing PDF documents.
Samba CTDB Vulnerability Discovery & Upstream GitLab Merge Request
Upstream Security FixConducted a low-level C security audit and fuzzing analysis of Samba CTDB socket handling, resulting in an official upstream patch and Merge Request (!4239) by the Samba Team.
Cryptographic Entropy Research Archived on CERN Zenodo
CryptanalysisPublished formal research analyzing statistical entropy patterns in 24-word BIP39 mnemonic phrases, archived permanently with a DOI on CERN Zenodo.
Technical Arsenal & Custom Tooling
Fuzzing frameworks, low-level programming languages, and binary analysis tools used in daily research and production.
Advanced Fuzzing & Vulnerability Research
4 TechsSpecialized tools and custom-built engines used to uncover deep security flaws in real-world software.
AFL++ (American Fuzzy Lop Plus Plus)
Coverage-guided mutation fuzzing, persistent mode harnesses, CMPLOG, and custom mutators for deep bug hunting.
Custom-Built Fuzzers & Crash Triaging Tools
Purpose-built protocol fuzzers, IPC boundary stress-testers, and automated crash deduplication utilities.
Sanitizers & Memory Auditing (ASan / UBSan / Valgrind)
Detecting out-of-bounds accesses, use-after-free, uninitialized memory reads, and integer overflows.
GDB, Radare2 & Binary Reverse Engineering
Dynamic instrumentation, disassembly analysis, root-cause crash investigation, and exploitability assessment.
Low-Level Systems & Mobile Engineering
3 TechsCore languages and platforms for building fast native software and production mobile apps.
C & C++ (C99 / C11 / C++20)
Manual memory management, pointer arithmetic, zero-copy buffers, and hardened system libraries.
x86-64 & ARM Assembly
Instruction-level profiling, register-level debugging, calling conventions, and SIMD vectorization.
Android Mobile Application Development
Production mobile apps published on Google Play, such as El Kantara PDF Reader, built for speed and simplicity.
View App on Google Play →