Dmytro Merkulov

WORK HISTORY

EDUCATION

ABOUT DMYTRO MERKULOV

A senior software engineer with 9 years of experience, primarily in backend development using Node.js. I also have some experience in DevOps, information security, and frontend development. Here are some examples of my work:Software Projects:1. A pet project written in Swift, https://github.com/mdmitry01/WinRes2. A tool for DNS rebinding-based SSRF attacks written in JavaScript, https://github.com/mdmitry01/dns-rebinding-tool3. A fix for the Expo project (a framework for React Native), written in Java, https://github.com/expo/expo/pull/198734. A fix for the \"node-fetch\" package (Fetch API for Node.js), https://github.com/node-fetch/node-fetch/pull/13925. Other pull requests: https://github.com/search?q=author%3Amdmitry01+ & type=pullrequestsSecurity vulnerability reports:1. A macOS vulnerability reported to Apple, acknowledged in their official security content updates for macOS:\"NetworkExtension - We would like to acknowledge Andrei-Alexandru Bleorțu, Dmytro Merkulov for their assistance.\", see https://support.apple.com/en-us/12•••62. A critical-severity vulnerability in Lark Technologies (developed by ByteDance, the company behind TikTok): an XSS escalated to an SSRF via a headless browser running on a Lark server, https://hackerone.com/reports/89•••93. A high-severity vulnerability in Lark Technologies, https://hackerone.com/reports/87•••24. A high-severity vulnerability in GitLab, https://hackerone.com/reports/72•••75. Other vulnerability reports: https://hackerone.com/mike12