Security researcher focused on Android, native code and fuzzing. Research, writeups and tools by Aadarsh Anand (ScreaMy7).https://screamy7.github.io/https://screamy7.github.io/blog/cve-2017-11729-libming-swftophp/https://screamy7.github.io/blog/cve-2017-11729-libming-swftophp/Re-finding CVE-2017-11729, a heap over-read in libming's SWF decompiler, with an AI coding agent running the fuzzing. Here's where it tried to lie to me.Sat, 03 Oct 2026 00:00:00 GMTBlogfuzzingcvelibmingaflllmsecurity-researchhttps://screamy7.github.io/notes/check-reachability-before-fuzzing-a-cve/https://screamy7.github.io/notes/check-reachability-before-fuzzing-a-cve/When I pick a known CVE to re-find by fuzzing, the question that matters isn't how bad the bug is or who found it. It's how many conditions a fuzzer has…Sat, 03 Oct 2026 00:00:00 GMTNotefuzzingcvellmhttps://screamy7.github.io/notes/herdr-and-omp-agent-setup/https://screamy7.github.io/notes/herdr-and-omp-agent-setup/Two tools do most of my agent work now. omp (oh my pi, a fork of Mario Zechner's Pi) is the coding agent. herdr is the terminal it lives in. They solve…Sat, 03 Oct 2026 00:00:00 GMTNotellmagentsworkflowfuzzinghttps://screamy7.github.io/blog/js-file-enumeration-four-years-later/https://screamy7.github.io/blog/js-file-enumeration-four-years-later/Follow-up to my 2022 post: how to collect an SPA's JavaScript, cut it down, and let an LLM read it without burning tokens or trusting a word it says.Fri, 02 Oct 2026 00:00:00 GMTBlogbug-bountyjavascriptllmreconhttps://screamy7.github.io/blog/js-file-enumeration-for-bug-bounty-hunters/https://screamy7.github.io/blog/js-file-enumeration-for-bug-bounty-hunters/Why reading JavaScript files pays off in bug bounty, my workflow for collecting and inspecting them, and two findings that came out of it.Thu, 03 Mar 2022 00:00:00 GMTBlogbug-bountyjavascriptrecon