Alexandre Borges
Research Scientist
Summary
🤩
RockstarAlexandre Borges is a vulnerability researcher and exploit developer with 10+ years of hands-on experience in reverse engineering, fuzzing and exploit development across Windows, macOS/iOS and hypervisor targets. At Blackstorm Security he researches internals, crafts fuzzers, audits code for complex classes of bugs (UAF, type confusion, race conditions, etc.) and develops real-world exploits while automating research tasks in C/C++ and Python. He also has a long history as an instructor for enterprise-level courses (Sun, Symantec) and brings strong systems knowledge from Solaris to modern OS internals and assembly. An active open-source contributor, he implemented core functionality in malwoverview, a first-response threat-hunting tool that integrates many malware intel sources and Android scanning. Based in Brazil, he pairs deep low-level technical rigor with practical threat-hunting and incident response experience, and regularly translates research into usable tooling and client-ready reports.
10 years of coding experience
Github Skills (8)
filetype10
hashlib10
python10
file-format10
data-analysis10
anti-malware9
malware9
cybersecurity9
Programming languages (6)
Github contributions (5)
alexandreborges/malwoverview
Sep 2018 - Nov 2022
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:49 releases, 443 commits, 46 PRs in 4 years 2 months
Contributions summary:Alexandre implemented the core functionality of the `malwoverview` tool, developing functions for file type detection, malware packing detection, and hash generation (sha256, md5). They refactored existing code and introduced features, such as listing imported/exported functions and checking files against VirusTotal. The user was also actively involved in extending the tool's capabilities, as evidenced by their updates and version releases.
androidipinfollmmalwarerdap
alexandreborges/winafl
Nov 2019 - Nov 2019
A fork of AFL for fuzzing Windows binaries
Contributions:26 commits, 26 pushes in 1 day
fuzzingwindows
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.