Sida Yan is a physician with 11 years of professional experience who blends clinical practice with hands-on contributions to open-source security and tooling projects. Based in the United States, he concurrently practices telemedicine and urgent care while contributing as a back-end and full-stack developer to projects like AntSword and several vulnerability research frameworks. His GitHub work shows practical security-minded engineering—implementing proxy support, Dockerized deployments, automated installers, and PoC exploits—highlighting a rare crossover of clinical practice and offensive security tooling. Trained at Saint Louis University School of Medicine and UT Health San Antonio in family medicine, he brings disciplined problem-solving from medicine into infrastructure and DevOps automation. Colleagues would note his ability to move between patient-facing responsibilities and low-level engineering details, especially in environments that demand reliability and rapid incident response.
11 years of coding experience
Family Medicine Residency Program, Family Medicine Residency Program at UT Health San Antonio
Doctor of Medicine - MD, Doctor of Medicine - MD at Saint Louis University School of Medicine
Bachelor of Arts - BA, Biology, General, Bachelor of Arts - BA, Biology, General at Washington University in St. Louis
Contributions:203 commits, 12 PRs, 186 pushes in 3 years 10 months
Contributions summary:Sida's commits primarily involve adding exploits and vulnerability demonstrations for various software and systems. Their contributions include creating or adapting proof-of-concept (PoC) code for numerous security vulnerabilities, such as those in ImageMagick, WordPress plugins, Zabbix, Joomla, and other platforms. This indicates a focus on identifying, understanding, and demonstrating security flaws within common software applications and infrastructure.
Contributions:1 release, 13 commits, 8 pushes in 6 months
Contributions summary:Sida primarily contributed to the AntSword project, a real-time XSS blind platform. Their commits show a focus on both frontend and backend aspects, including fixing bugs related to schema retrieval and client IP detection. The user also implemented features such as docker support and an installation wizard, demonstrating a breadth of knowledge across the project's infrastructure. Additionally, they made changes to both JavaScript and Node.js-based modules, solidifying their full-stack nature.
xssxss-platform
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.