0xHamy / Brampton, ON, Canada
VR • ZDH • AppSec • SysArch • VDP • DevSecOps

Hamed Kohi (0xHamy)

Role:

Vulnerability Researcher (VR) with 28x CVEs acknowledged by MITRE, VulDB, GitHub, and Apache Software Foundation. Focus: Vulnerability R&D, AppSec, Systems Architecture, responsible disclosure (RD), root-cause analysis (RCA), exploit validation (EV), and remediation guidance (RG).

CVE • VDP • VRT CTF → VR Transition CTI • RCA Web • Desktop • Infra Python • C • JavaScript MetaSploit • BurpSuite • Cobalt Strike

Selected CVEs (High-Visibility)

Total CVEs: 0 / 28
CVE
CVE-2025-24854
CVE
CVE-2025-8520
CVE
CVE-2025-11282
CVE
CVE-2025-9001

Lifecycle coverage: discovery → exploitation hypothesis → PoC/validation → responsible disclosure → remediation coordination → post-fix verification.

Dossier

Founder of Cyber Mounties Canada (cyberm.ca) and Security Researcher @ Delta Obscura (delta.cyberm.ca). Architect of production infrastructure: Docker, Kubernetes (K8s), AWS, Nginx, Apache, Stripe integrations, and DevSecOps hardening.

Certs
CPTS
VHL+
VHL Advanced+
Core
VR / ZDH
AppSec
SysArch
Current responsibilities
  • • Founder & Director @ cyberm.ca
  • • Security Researcher @ delta.cyberm.ca
  • • Training Provider @ academy.cyberm.ca
  • • Mentorship @ services.cyberm.ca

Tooling & Ops

Kali Linux Burp Suite Cobalt Strike Docker Kubernetes (K8s) AWS Nginx Apache Stripe DevSecOps VDP / Triage R&D / Coordination
Proven ability to translate technical findings into remediation guidance for engineering leadership and executive stakeholders.

Missions • Programs • Systems

Delta Obscura operations and Cyber Mounties Canada platforms — built to scale research, train talent, and ship real security impact. Emphasis on CVE packaging, cross-border collaboration, and asset-scale defense outcomes.

Mission
Mission Cyber Sentinel

Global cyber initiative with researchers from UK / Canada / Romania. Secured 446,000+ digital assets and 1.3B users (collaborative impact). Earned CVE credits for coordinated work.

OPSEC VDP R&D RCA
Mission
Mission Vector Zero

Objective: identify ≥1 zero-day across 30 widely-used software/hardware targets with documented usage of 250,000+ users each.

0day VR Exploit Dev Validation
Program
Delta Knowledge Transfer Program (DKTP)

Packages CVEs into CTF labs and exports them to regional CTF events to scale knowledge transfer and team reach. Pipeline: CVE → lab design → event distribution → researcher upskilling.

CTF VR Enablement Lab Engineering
Initiative
Cyber Diplomat Initiative (CDI)

Aim: 100 vulns in 100 software in 100 countries. Prepare researchers to operate across cultures while improving real-world security.

Cross-Culture Disclosure Reporting IDs / CVE

Interconnected Systems ( *.cyberm.ca )

Architecture-focused ecosystem for content, research missions, services, and specialized tooling.

Subdomain Purpose
academy.cyberm.ca Teaching / courses / knowledge transfer
delta.cyberm.ca Global research arm + cyber missions
services.cyberm.ca Mentorship + services + affiliates
0den.cyberm.ca Scraped GitHub repos + target discovery search
cvedoc.cyberm.ca "CVE Doctor" / health check for hiring managers

Experience Highlights (Condensed)

  • • Founded & led Cyber Mounties Canada platform; multilingual course ops (EN/FR/DE/ES/PT).
  • • Architected & secured production infra: Docker, K8s, AWS, Nginx/Apache, Stripe; DevSecOps practices.
  • • Operated VDP for *.cyberm.ca: triage → remediation → coordination.
  • • Delta Obscura: Vector Zero; recruited international researchers; built CTF→VR transition pathway.
VDP R&D RCA Exploit Dev DevSecOps K8s AWS