Samandeep Singh

A security professional with over a decade of experience in offensive security consulting, vulnerability research, and technical training, with deep expertise in areas such as application security, reverse engineering, smart contract auditing, and low-level system internals.

Work includes the discovery and responsible disclosure of multiple security vulnerabilities across enterprise applications, embedded systems, and consumer software—several of which are documented under official CVE identifiers. Contributions to the security community extend to delivering talks and workshops at international and regional conferences, as well as actively supporting the ecosystem as a co-organizer of BSides Singapore.

Ongoing efforts focus on building and maintaining open-source security tools, experimenting with LLM integrations for reverse engineering, and sharing practical knowledge through hands-on trainings and curated resources.

Featured Projects:

• JADX-xVision-Plugin: LLM-enhanced reverse engineering plugin for the JadX Java decompiler.
• Xtreme Vulnerable Web Application (XVWA): A deliberately insecure web application for vulnerability discovery practice.
• Awesome Mainframe Hacking: A curated list of tools, references, and resources for mainframe exploitation.

Talks & Workshops:

• Smart Contract Bug Hunting 101 – Ethereum Edition - Disobey 2023 – Finland
• Linux x86_64 Reverse Engineering for Beginners - STANDCON 2022 – Singapore
• Gibson 101: Introduction to Mainframe Hacking - Null Chapter 2020 – Chandigarh
• Burp Suite Extension Development - DevSecCon 2019 – Singapore