Maksim Shudrak
Research Scientist
San Francisco, California, United States
Summary
🤩
RockstarMaksim Shudrak is a research scientist and security researcher based in San Francisco with 12 years of experience in low-level systems, dynamic instrumentation, and vulnerability discovery. He has contributed significant backend work to high-profile open-source projects like DynamoRIO and Dr. Memory, improving symbol handling, refactoring frontends, and adding OS syscall support and tests. As a security engineer on winAFL, he expanded fuzzing capabilities to networked targets and added custom DLL support, enabling broader and more flexible Windows binary testing. Maksim combines deep reverse-engineering and tooling expertise with practical engineering—shipping robust features that make instrumentation and fuzzing tools more adaptable in real-world scenarios. Colleagues would note his knack for turning intricate debugging and symbol problems into reliable, test-covered solutions that scale across platforms.
12 years of coding experience
Github Skills (17)
debugging10
wp-api10
testing10
dynamic10
instrumentation10
winapi10
c1110
security10
c1710
system-calls10
dynamic-analysis10
afl-fuzz10
fuzzing10
ws-api10
socket-io9
Programming languages (5)
Github contributions (5)
DynamoRIO/drmemory
Apr 2014 - Oct 2017
Memory Debugger for Windows, Linux, Mac, and Android
Role in this project:
Back-end Developer
Back-end DeveloperContributions:62 commits, 35 PRs, 53 pushes in 3 years 6 months
Contributions summary:Maksim primarily contributed to the `drmemory` project by adding support for numerous Windows Vista and Windows 7 system calls. They updated the definitions of these system calls, incorporating information from Process Hacker, and included code changes to reflect these additions. Furthermore, the user implemented tests for these and other related system calls, including `NtSetIoCompletion` and `NtCreatePrivateNamespace`, with a focus on testing both argument handling and structure printing. The user also added supporting code to print the structure.
androidlinuxwindows
googleprojectzero/winafl
Jul 2018 - Sep 2018
A fork of AFL for fuzzing Windows binaries
Role in this project:Security Engineer
Security EngineerContributions:6 commits, 4 PRs, 58 comments in 1 month
Contributions summary:Maksim focused on enhancing the winAFL project's capabilities by implementing network fuzzing features, enabling the testing of applications over TCP and UDP protocols. The user introduced functionality to send test cases through sockets, significantly expanding winAFL's ability to find vulnerabilities. Furthermore, the user integrated support for custom DLLs, allowing for flexible integration with various target applications and custom test case processing, improving the fuzzer's adaptability to different environments.
fuzzingwindowssecurityafl
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.