Zach Riggle
Security Engineering And Research, Remote High Value Team at Apple
Austin, Texas, United States
Summary
🤩
Rockstar🎓
Top SchoolZach Riggle is a senior security engineer and researcher with 15 years of experience uncovering and mitigating high-impact vulnerabilities across hardware and software stacks for companies like Apple and Google. He’s led cross-functional audits, developed hundreds of tooling and fuzzing frameworks at datacenter scale, and driven adoption of mitigations such as ASAN/UBSAN and improved sandboxing, with multiple patents pending. Zach’s background in reverse engineering and exploit development is reflected in prolific open-source contributions to projects like pwndbg, capstone, pwntools and syzkaller, where he improved disassembly bindings, debugging for foreign architectures, and kernel fuzzing support. He’s discovered thousands of bugs (500+ rated Critical) affecting billions of devices and routinely automates verification for large-scale security fixes, combining deep low-level systems expertise with pragmatic engineering to harden real-world products.
15 years of coding experience
Bachelor of Science (B.S.), Computer Science, Bachelor of Science (B.S.), Computer Science at Lake Michigan CollegeBS, Computer Science, BS, Computer Science at Michigan State University
Spanish, English
Stackoverflow
3,015reputation
135kreached
39answers
30questions
windows
top-5%
Github Skills (58)
debugging10
debug10
assembly10
bins10
dis10
python10
scripting10
testing10
linux10
c1110
binarydiff10
security10
c1710
kernel10
gdb10
Programming languages (19)
Github contributions (5)
Gallopsled/pwntools-write-ups
Aug 2014 - Jun 2016
A colleciton of CTF write-ups all using pwntools
Role in this project:
Security Engineer
Security EngineerContributions:28 commits, 2 PRs, 1 push in 1 year 10 months
Contributions summary:Zach contributed to a collection of CTF write-ups using pwntools, focusing on reverse engineering and exploitation of vulnerabilities. The commits demonstrate a strong understanding of binary exploitation techniques, format string vulnerabilities, and ROP (Return-Oriented Programming). The user's work includes crafting payloads, exploiting buffer overflows, and leveraging techniques like DynELF and the use of shellcode.
ctfpwntoolsupswrite-ups
Gallopsled/pwntools-tutorial
Jun 2015 - Oct 2018
Tutorials for getting started with Pwntools
Role in this project:Security Engineer
Security EngineerContributions:46 commits, 3 PRs, 46 pushes in 3 years 4 months
Contributions summary:Zach contributed several exploit examples using pwntools, focusing on buffer overflows, and remote network connections. Their work involved writing Python scripts to interact with vulnerable programs and crafting payloads to achieve shell access or manipulate program execution. The examples showcased skills in exploiting vulnerabilities and understanding low-level system interactions, targeting both local and remote systems, including foreign architectures.
pwntoolspythonglibc
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.