Giovanni Grazioli
Solutions Security Architect 解决方案安全架构师 at Ubisoft China Studios
Shanghai, Shanghai, China
Summary
🤩
Rockstar🎓
Top SchoolGiovanni Grazioli is a solutions security architect and seasoned security software developer with 15 years' experience blending reverse engineering, cryptography and secure systems design across gaming, cloud and automotive domains. Based in Shanghai, he co-founded RizinOrg and has deep hands-on expertise improving major open-source reverse-engineering tooling (notably contributions to rizin, radare2 and the Capstone disassembler) where he fixes memory-safety bugs, ports architectures like PowerPC/LoongArch and tightens analysis accuracy. At Ubisoft and prior roles he has bridged product security and low-level engineering—shipping WAF and in-vehicle cybersecurity improvements while integrating complex third-party toolchains. Known for PowerPC CellBE affinity and pragmatic code refactors, he combines vulnerability hunting, build engineering and systems architecture to harden toolchains and production software.
15 years of coding experience
4 years of employment as a software developer
University of Milan
Chinese, English, Italian, French
Github Skills (38)
powerpc10
debug10
assembly10
ghidra10
c-language10
decompiler10
mson10
dis10
waf10
build-system10
c-programming10
c1110
decompile10
security10
c1710
Programming languages (21)
Github contributions (5)
rizinorg/rizin
Nov 2020 - Jan 2023
UNIX-like reverse engineering framework and command-line toolset.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:3492 reviews, 518 commits, 1045 PRs in 2 years 2 months
Contributions summary:Giovanni contributed to fixing out-of-bounds read vulnerabilities, updating and integrating libraries, and refactoring code in the rizin project, demonstrating skills in reverse engineering and security. These contributions included identifying and patching memory safety issues, as well as updates to improve code quality and functionality. Moreover, the user was also responsible for porting commands and improvements to various parts of the project.
unixsecuritycode-injectionunix-likebinaries
nbs-system/naxsi
Oct 2018 - Dec 2020
NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
Role in this project:Backend & Security Engineer
Backend & Security EngineerContributions:9 releases, 35 reviews, 11 commits in 2 years 2 months
Contributions summary:Giovanni primarily contributed to the core codebase by modifying and updating header files and code related to the NAXSI WAF. Their work involved refactoring and optimizing the code, including the introduction of IPv6 support and JSON escaping. Additionally, the user fixed a boundary bug in the multipart POST handling, which improved the WAF's security. Further contributions included updating the libinjection dependency and compilation fixes.
nginxwafnaxsiperformancerules
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.