David Moore
Security Researcher at Independent
California, United States
Summary
👤
Senior🎓
Top SchoolDavid Moore is a security researcher with nine years of experience finding deep, high-impact vulnerabilities across major platforms and open source projects. He’s a Google VRP Hall of Famer and ranked Bugcrowd researcher with paid bounties and CVEs ranging from XSS and SQL injection to interpreter-level flaws in Ruby MRI and a critical Netflix Dynomite heap overflow. His background spans application and product security roles at Google and Looker, founding fuzzing-focused tooling and research at Fuzz Stati0n, and core contributions to projects like the Linux kernel, Python, and Hadoop. Proficient in languages from C and x86 assembly to Go and Node.js, he combines dynamic analysis and AFL-powered fuzzing to surface bugs missed by other tests. A frequent speaker at security conferences and moderator of the Fuzzing subreddit, he blends practical exploit development with responsible disclosure and community leadership. Based in California, he holds a BA in Computational Mathematics from UC Santa Cruz and is currently working independently as a security researcher.
9 years of coding experience
10 years of employment as a software developer
University of California Santa Cruz
Github Skills (22)
metadata10
jstree10
ionicons9
adonisjs9
raster9
branding9
svg9
pjax9
creative-commons9
exploit8
github7
sanitizer7
fuzzing6
security-testing6
security6
Programming languages (1)
Github contributions (5)
fuzzstati0n/fuzzgoat
Jul 2016 - Jun 2017
Contributions:16 commits, 17 pushes, 3 branches in 11 months
fuzzstati0n/examples
Jun 2017 - Jun 2017
Contributions:4 pushes, 1 branch in 1 day
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.