Leon Hwang
Application Developer
Singapore, China
Summary
🤩
RockstarLeon Hwang is an Application Developer with 9 years of hands-on experience specializing in eBPF and kernel-level tooling, based in Singapore. He contributes to high-profile open-source projects like cilium/ebpf and maintains security-focused tooling such as ecapture, demonstrating deep expertise in low-level networking, BPF program loading, and Linux kernel integrations. Leon combines backend and security engineering skills to improve stability, expose richer program metadata, and implement practical features like pcap-filter support and syscall hooking for robust packet capture. His work shows a balance of systems-level rigor and pragmatic engineering—fixing build issues, refining BTF/JIT information, and adapting BPF programs across architectures (amd64/arm64). Colleagues would describe him as a meticulous contributor who navigates complex kernel internals while keeping real-world security use cases in mind.
9 years of coding experience
Github Skills (15)
golang10
audit10
linux10
go10
ssl10
tls1210
auditing10
tls1310
btdf10
ebpf10
tcp9
ip9
android8
bison7
flex7
Programming languages (5)
Github contributions (5)
gojue/ecapture
Mar 2022 - Feb 2025
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
Role in this project:
Back-end & Security Engineer
Back-end & Security EngineerContributions:12 reviews, 6 PRs, 28 comments in 2 years 11 months
Contributions summary:Leon primarily focused on enhancing the `ecapture` project, which captures SSL/TLS plaintext. They implemented features such as pcap-filter expression support for packet filtering and improved the capture of 5-tuple information by hooking specific syscalls. Additionally, the user addressed security and stability issues by fixing compilation problems, integrating necessary dependencies, and improving the environment detection for correct BPF program loading. These contributions align with the project's goal of network security analysis.
android-x86certtlsx86linux-android
cilium/ebpf
Mar 2023 - Dec 2024
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
Role in this project:Back-end Developer
Back-end DeveloperContributions:6 reviews, 4 PRs, 10 comments in 1 year 9 months
Contributions summary:Leon primarily contributes to the `cilium/ebpf` repository by implementing and refining low-level eBPF functionality. Their work includes adding new features, such as creating links from file descriptors and exposing program information. They also address bugs and improve code quality by correcting type-related printing issues, particularly within the BTF (BPF Type Format) system. Furthermore, they are responsible for exposing more JITed information in programInfo.
golangkernelattachebpf-programsgo-library
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.