About

A hooded figure holding a green light beneath a starry sky

whoami

  • Andrei Lungu, or as some prefer to call me: "andutu"
  • Computer Engineering student @ Politehnica University of Bucharest
  • Junior Security Researcher @ Pentest-Tools.com

Some of my work:

A few security issues I’ve researched and disclosed:

  • CVE-2026-78327SonicWALL NSM · Authenticated Command Injection
  • CVE-2026-78328SonicWALL NSM · PrivEsc from Admin to SuperAdmin
  • CVE-2026-81939SonicWALL NSM · Zip Slip to RCE (huge thanks to Matei "Mal" Badanoiu)
  • CVE-2026-96540SonicWALL NSM · Improper Access Control
  • CVE-2026-100232SonicWALL NSM · (another) Command Injection (huge thanks to Matei "Mal" Badanoiu)

Notable CTF results (and other contests):

  • DCTF Finals · 2026Selfwash · ???th place
  • DCTF Quals · 2026Selfwash · 17th place
  • ROCSC · 2026Individual · participant
  • ROCSC Quals · 2026Individual · 9th place (seniors)
  • Electron CTF · 2026RollTheDice · 3rd place (seniors)
  • HackItAll · 2025SAP's challenge · 3rd place
  • DCTF Finals · 2025vianub1tz · 16th place
  • DCTF Quals · 2025vianub1tz · 14th place
  • EESTEC Olympics · 2025Bitdefender's challenge · 2nd place
  • ROCSC · 2025Individual · participant
  • Unbreakable · 2025Individual · 14th place

Contact me: