Taha Gorme
Software engineer, security researcher, and reverse engineerMumbai, India
I take software apart because I want to know how it works. Most of that work is reading code I was not given and working out what a program really trusts when it claims to check something. I also build web, Android, and Flutter software, and I have won Design Championship 2020 at district and national level, with a runner-up finish in 2021.
Open to software engineering, security research, Android, and full-stack roles.
- focus
- reverse engineering, Android security, API security, web development, Rust, Flutter
- open to
- software engineer, security researcher, reverse engineer, Android developer, full-stack developer
- education
- B.Tech Computer Engineering, 2025 to 2029
- security
- Burp Suite, Frida, mitmproxy, Ghidra, jadx, apktool
- contact
- hello@tahag.dev
education
achievements
Design Championship 2020
WinnerDesign Championship 2020
WinnerDesign Championship 2021
Runner-upprojects
markdown_parser
openA hand-written markdown parser in Rust with no parsing libraries, using a position-based parser and UTF-8-safe traversal. Compiled to WebAssembly with wasm-bindgen and bundled with webpack 5 for live in-browser rendering.
bare-socket
openAn HTTP/1.1 server built on raw TCP sockets with only the Rust standard library. Manual request parsing, thread-per-connection handling, routing, and Content-Length responses, with no HTTP libraries or async runtime.
tahag.dev
openA Cloudflare Pages and Hono publishing platform with content in D1, markdown rendered once at save time, an edge HTML cache, comments and analytics, Fuse.js search, RSS and JSON feeds, offline PWA support, and a hardened admin with sessions, TOTP, and audit logging.
Android and API research
Reverse engineered Android apps and APIs with jadx, apktool, Frida, Burp Suite, and mitmproxy. Found client-side trust and logic flaws with reproducible evidence, including a client-controlled order total that was reported and fixed.
skills
- reversing
- Ghidra, radare2, Frida, jadx, apktool, objection
- security
- Burp Suite, mitmproxy, MobSF, certificate pinning, integrity checks, static and dynamic analysis
- languages
- Rust, TypeScript, JavaScript, Java, Dart, Python, C
- web
- Node.js, Bun, Hono, HTML, CSS, REST APIs, SQLite
- mobile
- Android SDK, Java, Flutter, Dart, Gradle
- design
- interface design, visual design, product thinking
- computer science
- data structures and algorithms, object-oriented programming, operating systems, databases, computer networks
- systems
- Linux, Git, ARM64, virtual machines and emulators