👋 Hi, I'm ClumsyLulz

Taylor Christian Newsome · Security Researcher & Developer

⚠️ Official Telegram: @SleepTheGod I do not use Twitter/X. Any account claiming otherwise is an impersonator.

🧭 Professional Summary

Security researcher and developer focused on vulnerability research, application security, reverse engineering, low-level systems, firmware, and security tooling. My work spans bug bounty research, CTFs, web security, kernel and console research, telecommunications security, and open-source development.

I build and analyze security tooling across multiple platforms and languages, with a particular interest in understanding systems at a low level and turning research into practical, reproducible tools.

---

📑 Table of Contents

• 🔗 Professional Links
• 🎯 Areas of Focus
• 📚 Public Research & Projects
• 📱 Apple / Mobile Research
• 🎮 Console & Firmware Research
• 🖥️ Systems & Application Development
• 🌐 Open-Source Contributions
• 🏆 CTF Achievements
• 🔒 Vulnerability Disclosures
• 🛠️ Certifications & Training
• 🧰 Technical Stack
• 👤 Personal & Creative
• 💰 Support My Research
• 📜 Legal Notice
• 🤝 Responsible Disclosure

---

🔗 Professional Links

Platform	Profile
GitHub — Primary	@ClumsyLulz
GitHub — Secondary	@SleepTheGod
LinkedIn	in/clumsy
Website	pl0x.org
HackerOne	@DBMS
Bugcrowd	@Sleep
YesWeHack	@ClumsyLulz
Hack The Box	Profile
Responsible Disclosure	sleepraps@gmail.com

---

🎯 Areas of Focus

• 🔍 Vulnerability Research & Application Security
• 💻 Bug Bounty Research
• 🛡️ Security Tooling & Automation
• 🔬 Reverse Engineering
• 🧠 Kernel & Low-Level Research
• 🎮 Console & Firmware Research
• 📱 iOS / Android Research
• 📡 SS7 / SIGTRAN / Telecommunications Security
• 🧩 Binary Exploitation & CTF Research
• 💻 Systems & Software Development

---

📚 Public Research & Projects

🔐 Security Research

DScanner

Drupal Vulnerability Scanner & CTF Research Tool

Drupal-focused vulnerability scanning and security research tooling.

UniversalCasinoExploit

Client-Side Security Research

JavaScript-based research exploring client-side application-security concepts.

Ss7

SS7 / SIGTRAN Research Environment

Research tooling and environment setup for SS7/SIGTRAN telecommunications security, including SCTP, GNU Radio, Asterisk, and related components.

restoring-LUKS-headers

LUKS Header Backup & Restoration

Bash automation for backing up, encrypting, restoring, and managing LUKS headers.

Writeups

Security & Reverse-Engineering Writeups

Technical research covering:

• Reverse engineering
• Exploit development
• Return-Oriented Programming
• Automated ROP generation
• Binary exploitation
• Console research
• Kernel research
• Security mitigations

---

📱 Apple / Mobile Research

iPhone_Dump_Kernel

iPhone kernel-dump and device research tooling covering DFU workflows, kernel-log collection, device diagnostics, and libimobiledevice-based research.

---

🎮 Console & Firmware Research

Xbox360FTP

Python-based Xbox 360 FTP and file-management utility featuring device discovery, file transfers, hashing, and synchronization functionality.

XeXTool

Tooling for analyzing Xbox XEX files and converting XEX-related data into C-oriented representations.

Xbox-One-Bliss-Hack

Experimental Xbox One BLISS and hardware/firmware research involving boot-ROM, eFuse, hypervisor, and related low-level concepts.

⚠️ Experimental research project. Hardware-specific functionality and addresses may vary.

PS5_Linux_Boot

Experimental research into Linux boot workflows on PS5 hardware, including kernel/initramfs preparation and payload research.

---

🖥️ Systems & Application Development

Powershell-ADB

PowerShell automation for ADB installation, configuration, and Android-device interaction.

CrowdStrike-BSOD-Fix-2024

PowerShell-based Windows recovery tooling related to the 2024 CrowdStrike outage.

twitterclone

Flutter/Firebase application demonstrating authentication, database, storage, messaging, and related application functionality.

Forked from TheAlphamerc/flutter_twitter_clone.

ASCII

Small shell-based ASCII-art project.

IETF Datatracker Fork

Public fork of the IETF Datatracker project.

---

🌐 Open-Source Contributions

In addition to projects maintained under my own accounts, my public GitHub activity includes contributions to external projects.

Project	Contribution
SecLists	OpenAI endpoint wordlist — PR #1341
Blackbird	PR #161
ZeroNet	PR #2865
ALHacking	PR #28
Grok-1	PR #389

---

🏆 CTF Achievements

TechSquad Inc. — Capture The Flag Competition

Metric	Result
Position	🥇 5th Place
Challenges Solved	126/126 — 100%
Total Points	79,100
Total Teams	589
Team Name	TechSquad Inc.
Username	ClumsyLulz
Name	Taylor Christian Newsome
CTF Date	15/05/2026 – 20/05/2026

---

🔒 Vulnerability Disclosures

Microsoft MSRC — Security Update Acknowledgement

Date	Description	Status
Apr 30, 2023	Taylor Christian Newsome with GitHub	Online Services

IBM PSIRT — Confirmed Vulnerability

IBM Product Security Incident Response Team (PSIRT) confirmed a vulnerability reported by me and worked with the affected product/website team toward remediation.

"Our product team has performed analysis on the reported issue and has confirmed the vulnerability. We are working with the affected product/website team(s) to develop a plan for remediation."

— IBM PSIRT Operations

Reference: CIN0008672

---

🛠️ Certifications & Training

Course	Provider	CEU
Linux 100: Fundamentals	TCM Security	2
Practical Help Desk	TCM Security	17
Programming 100: Fundamentals	TCM Security	3
AI 100: Fundamentals	TCM Security	3
Practical Security Fundamentals	TCM Security	9
Soft Skills for the Job Market	TCM Security	7

🏅 TryHackMe — Industrial Intrusion

• Rank: #2,551
• Points: 15
• Completed: 30 June 2025
• Instructors: Heath Adams (TCM Security) & Andrew Bellini

---

🧰 Technical Stack

Languages
├── Python
├── Bash
├── PowerShell
├── C / C++
├── Swift
├── JavaScript
└── Dart / Flutter

Security
├── Vulnerability Research
├── Web Security
├── Reverse Engineering
├── Binary Exploitation
├── ROP
├── Kernel Research
├── Firmware Analysis
└── Security Automation

Platforms
├── Linux
├── Windows
├── iOS
├── Android
├── Xbox 360
├── Xbox One
└── PlayStation 5

Telecommunications
├── SS7
├── SIGTRAN
├── SCTP
└── VoIP / Asterisk

---

👤 Personal & Creative

These accounts are separate from my professional security portfolio.

Platform	Profile
Telegram	@SleepTheGod
CodePen	ClumsyLulz
YouTube	Stripped
SoundCloud	DoXeD
Facebook	Hostiles
Discord	ClumsyBeats

⚠️ Telegram: t.me/SleepTheGod is my only official Telegram account.

🚫 Twitter/X: I have no Twitter/X account. Accounts claiming otherwise are impersonators.

---

💰 Support My Research

If you'd like to support independent security research:

Cryptocurrency

Currency	Address
BTC	bc1qrprmanzgaermswvts62yrztzzqwhcfr8aqp4ly
ETH	0x80c96d2b2a0419418b75d54496d998823c48c563
SOL	6WJin474yfmPartRJnc4ekxNnMz8M7eWnHEpCcTNxujr

Other Payment Methods

• 💳 Cash App — $ClumsyLulz
• 💳 PayPal — @TNEWSLMAO
• 💳 Venmo — @Vulnerability

---

📜 Legal Notice

© 2026 Taylor Christian Newsome (ClumsyLulz). All Rights Reserved.

Repositories containing their own license are governed by that license.

For repositories or content explicitly marked as not open source, no license is granted to copy, modify, distribute, or use the work without explicit written permission.

🚫 Where No License Is Granted

• Copying, reproducing, or distributing
• Creating derivative works
• Commercial or non-commercial use
• AI/ML training or dataset inclusion
• Removing or altering attribution

Access does not imply permission. Review does not imply a license.

---

🤝 Responsible Disclosure

Found a vulnerability? Please report it responsibly.

📧 Contact: sleepraps@gmail.com

---

$ exit
ClumsyLulz out.