zakocs.com

Mitch Zakocs

Reverse engineering and software exploitation

I'm a Security SWE at Apple, working with SPEAR on exploitation mitigations and memory safety in the XNU kernel.

About

I enjoy low-level security and software engineering. I graduated ASU in 2025 with a bachelors in Computer Science. I mostly focus on vulnerability research, reverse engineering, fuzzing, and memory safety technologies.

I have been programming for 9 years. You can find some of my work on the Projects page.

Skills

Computer security
  • Discovering and exploiting vulnerabilities in embedded, userspace, kernel, and web environments.
  • Fuzzing and testing with AFL++, libAFL, libFuzzer, libprotobuf-mutator, and sanitizers.
  • Reverse engineering applications and firmware with IDA Pro, Ghidra, gdb, QEMU, WinDBG, and dnSpy.
  • Developing tooling in Python and C using glibc, IDAPython, LLVM, Unicorn, AFL++, and Win32 API.
  • Defeating obfuscation, protection, and packing methods, including VM-based obfuscation.
  • Analyzing PCBs, dumping firmware, working with wired protocols (USB, SPI, I2C), and wireless protocols/modulation (Bluetooth, 5G, 802.11, FM, OFDM, PSK).
Software engineering
  • Building back-end applications and tools in Python, C, C++, and Rust.
  • Writing embedded firmware using FreeRTOS, Arduino, and MicroPython.
  • Managing data with PostgreSQL, SQLite, MongoDB, Looker, and GraphQL.
  • Deploying with GitHub, Docker, Kubernetes, Vercel, AWS EC2, Vagrant, and Google Cloud Platform.

Resumé

Download resumé (PDF)

Contact

mzakocs@gmail.com
Discord: mzakocs

Disclaimer & credits