# GUIARX — GUIAR OQBA (قيار عقبة) | Low-Level Systems Programming, Vulnerability Research & Advanced Fuzzing (AFL++)

> Official Markdown representation of https://guiarx.com/ for AI agents, search engines, and LLM retrieval systems.

## 1. Executive Profile

- **Name**: GUIAR OQBA (Arabic: قيار عقبة)
- **Brand / Entity**: GUIARX (GUIARX - ELKANTARA)
- **Primary Role**: Low-Level Systems Programmer (C / C++ / Assembly) & Cybersecurity / Vulnerability Researcher
- **Core Specialization**: Vulnerability Discovery & Advanced Fuzzing (`AFL++`, `LibFuzzer`, ASAN/UBSAN, and custom-built fuzzing engines), Bare-Metal C/C++/Assembly Systems Engineering, and High-Performance Android Application Development
- **Location**: El Kantara, Biskra, Algeria (Remote Worldwide)
- **Languages Supported**: English (`en`), Arabic (`ar`)
- **Email**: security@guiarx.com
- **Telegram**: https://t.me/maronyo (`@maronyo`)
- **GitHub**: https://github.com/okba14
- **ORCID**: https://orcid.org/0009-0008-1629-0002
- **LinkedIn**: https://www.linkedin.com/in/guiar-oqba-0207a9253

---

## 2. Engineering Services & Live Work (`https://guiarx.com/services/`)

### Service 01: Vulnerability Discovery & Advanced Fuzzing (`AFL++`)
Deep security auditing and automated vulnerability discovery in C/C++ targets, network protocols, and binary parsers using `AFL++` and custom-built fuzzing engines.
- Custom fuzzing harnesses (`AFL++` / `LibFuzzer`) with ASAN, MSAN, and UBSAN instrumentation
- Memory corruption hunting: buffer overflows, use-after-free (UAF), integer overflows, and race conditions
- Crash triage, root-cause analysis, PoC exploit generation, and source-level security patches
- **Verified Proof**:
  - [Samba CTDB Official Patch (GitLab MR !4239)](https://gitlab.com/samba-team/samba/-/merge_requests/4239/diffs?commit_id=692cdabe3a43bb9cc9e3e050415bd0ef6be9ee83)
  - [Zero-Breach Official Acknowledgment (GitHub PR #8)](https://github.com/interplains/zero-breach/pull/8#event-33736605504)

### Service 02: Low-Level Systems Programming (`C / C++ / Assembly`)
Designing and building bare-metal software, high-throughput network servers, custom memory allocators, and performance-critical libraries in C, C++, and x86-64 / ARM Assembly.
- High-speed systems and network programming (`POSIX`, `epoll`, `io_uring`)
- Custom binary parsers, compilers, and low-latency native engines
- Performance profiling, SIMD vectorization, and assembly-level optimization

### Service 03: High-Performance Mobile App Development (`Android`)
End-to-end engineering of fast, lightweight, and security-hardened Android applications powered by native C/C++ (JNI/NDK) rendering and processing engines.
- Native C/C++ core integration via Android NDK/JNI for instant document and media rendering
- Minimal memory footprint, zero bloat, and strict local data privacy
- Full lifecycle delivery from architecture to Google Play production release
- **Live Production App**:
  - [El Kantara PDF Reader on Google Play](https://play.google.com/store/apps/details?id=com.elkantara.pdfreader&hl=en)

---

## 3. Transparent Pricing & Engagement Models (`https://guiarx.com/pricing/`)

1. **Mobile App Development & Systems Build — Starting at $1,200 USD (Project-Based)**
   - High-performance Android app development or native C/C++ module integration
   - Memory-efficient architecture with fast response times
   - Complete source code delivery and build documentation
   - Security hardening and pre-release testing

2. **Low-Level C / C++ / ASM Engineering — Starting at $1,500 USD (Per Milestone)**
   - Custom systems programming in C, C++, and x86-64 / ARM Assembly
   - High-speed parsers, network daemons, and custom CLI tools
   - Performance optimization and memory leak elimination
   - Clean, documented, zero-dependency codebases

3. **Deep Fuzzing & Vulnerability Audit (`AFL++`) — Starting at $2,500 USD (Full Engagement)**
   - Custom `AFL++` and proprietary fuzzing harness development for target binaries/libraries
   - Deep source & binary auditing for memory corruption and logic flaws
   - Reproducible Proof-of-Concept (PoC) inputs and stack traces
   - Source-level remediation patches and verification re-testing

---

## 4. Verified Vulnerability Disclosures & Publications (`https://guiarx.com/research/`)

1. **Samba CTDB Socket Security Vulnerability Disclosure** (2025 — Samba Team Official GitLab MR `!4239`)
   - **URL**: https://guiarx.com/research/samba-ctdb-socket/
   - **Upstream Patch**: https://gitlab.com/samba-team/samba/-/merge_requests/4239/diffs?commit_id=692cdabe3a43bb9cc9e3e050415bd0ef6be9ee83
   - **Impact**: Prevented unauthorized local socket manipulation and race conditions in enterprise Samba CTDB cluster nodes.

2. **Zero-Breach Security Vulnerability Disclosure (`okba14`)** (2025 — GitHub Official PR `#8`)
   - **URL**: https://guiarx.com/research/zero-breach-vulnerability/
   - **Upstream Patch**: https://github.com/interplains/zero-breach/pull/8#event-33736605504
   - **Impact**: Remediated critical security boundary flaw with direct upstream maintainer acknowledgment crediting `okba14`.

3. **Cryptographic Entropy Patterns in BIP39 Implementations** (2024 — Zenodo DOI: `10.5281/zenodo.18458796`)
   - **URL**: https://guiarx.com/research/bip39-entropy-patterns/
   - **External URL**: https://zenodo.org/records/18458796

4. **Structural Weaknesses in Non-Standard Mnemonic Generators** (2023 — Zenodo DOI: `10.5281/zenodo.18461992`)
   - **URL**: https://guiarx.com/research/mnemonic-weaknesses/
   - **External URL**: https://zenodo.org/records/18461992