About

whoami
- Andrei Lungu, or as some prefer to call me: "andutu"
- Computer Engineering student @ Politehnica University of Bucharest
- Junior Security Researcher @ Pentest-Tools.com
Some of my work:
A few security issues I’ve researched and disclosed:
- CVE-2026-78327SonicWALL NSM · Authenticated Command Injection
- CVE-2026-78328SonicWALL NSM · PrivEsc from Admin to SuperAdmin
- CVE-2026-81939SonicWALL NSM · Zip Slip to RCE (huge thanks to Matei "Mal" Badanoiu)
- CVE-2026-96540SonicWALL NSM · Improper Access Control
- CVE-2026-100232SonicWALL NSM · (another) Command Injection (huge thanks to Matei "Mal" Badanoiu)
Notable CTF results (and other contests):
- DCTF Finals · 2026Selfwash · ???th place
- DCTF Quals · 2026Selfwash · 17th place
- ROCSC · 2026Individual · participant
- ROCSC Quals · 2026Individual · 9th place (seniors)
- Electron CTF · 2026RollTheDice · 3rd place (seniors)
- HackItAll · 2025SAP's challenge · 3rd place
- DCTF Finals · 2025vianub1tz · 16th place
- DCTF Quals · 2025vianub1tz · 14th place
- EESTEC Olympics · 2025Bitdefender's challenge · 2nd place
- ROCSC · 2025Individual · participant
- Unbreakable · 2025Individual · 14th place