# Haitao Zheng

Cyber Security & Privacy student  
Bonn, Germany · h@tzheng.dev · tzheng.dev · github.com/0xTaoZ · linkedin.com/in/haitaozheng

## Education

**Hochschule Bonn-Rhein-Sieg**, B.Sc. Cyber Security & Privacy (Oct 2025 – present)  
Coursework: Java, Linux, networking, databases, Technische Informatik, GDPR

**FHM University of Applied Sciences, Bielefeld**, University preparation, Feststellungsprüfung (Dec 2024 – Jun 2025)  
German C1 certified within the programme

**Harvard CS50x**, Online course, computer science foundations (2024)

## Security

- **CVE-2026-120829** (Ansible): Discovered and reported; CVE assigned and credited by Red Hat Product Security. Upstream fix in progress.

## Open source

**pyinfra** (Python infrastructure automation · 6.1k stars), 16 merged PRs, Jul 2026 – Oct 2026
- Added OpenSSH host-certificate trust to the SSH connector without weakening strict host-key checking. (https://github.com/pyinfra-dev/pyinfra/pull/1945)
- Fixed sudo with rsync, nested ProxyJump sockets, su prompts in fact output, NFSv4 ACLs and pinned dnf versions. (https://github.com/pyinfra-dev/pyinfra/pull/1950, https://github.com/pyinfra-dev/pyinfra/pull/1980, https://github.com/pyinfra-dev/pyinfra/pull/1981, https://github.com/pyinfra-dev/pyinfra/pull/1955, https://github.com/pyinfra-dev/pyinfra/pull/1913)

**cfn-lint** (AWS CloudFormation linter · 2.6k stars), 11 merged PRs, Jul 2026 – Oct 2026
- Rejected Fn::Select lifecycle policies that CloudFormation refuses, validated at the policy layer. (https://github.com/aws-cloudformation/cfn-lint/pull/4704)
- Corrected validation of Fn::GetAZs in Fn::Join, negative Fn::Select indexes, SAM stage references and log group names. (https://github.com/aws-cloudformation/cfn-lint/pull/4677, https://github.com/aws-cloudformation/cfn-lint/pull/4622, https://github.com/aws-cloudformation/cfn-lint/pull/4730, https://github.com/aws-cloudformation/cfn-lint/pull/4745)

**Prowler** (Cloud security scanner · 15.2k stars), 3 merged PRs, Jul 2026 – Sep 2026
- Added a Kubernetes check for Pods mounting hostPath volumes. (https://github.com/prowler-cloud/prowler/pull/11837)
- Stopped 7 ECS checks from reporting PASS when the AWS describe call failed. (https://github.com/prowler-cloud/prowler/pull/12217)

**Other merged work** (Jul 2026 – Sep 2026)
- Trivy: Jenkins plugin license detection (https://github.com/aquasecurity/trivy/pull/10939)
- GuardDog: PyPI Inspector links for findings (https://github.com/DataDog/guarddog/pull/797)
- ansible-lint: register projection naming (https://github.com/ansible/ansible-lint/pull/5110)
- Graphtage: INI semantic diff (https://github.com/trailofbits/graphtage/pull/120)

## Projects

**cloudtrail-quickscan** (Python): CLI that flags root use, MFA removal, IAM boundary removal, disabled monitoring and public ingress in CloudTrail logs; JSON output, unit-tested rules. https://github.com/0xTaoZ/cloudtrail-quickscan

**StudyPulse** (TypeScript, React, Cloudflare Workers, D1): Study planner with a topic memory model and recall checks; model grades are bounded and rewards are computed on the server. https://github.com/0xTaoZ/studypulse-app

**Heartbleed lab** (Docker, OpenSSL, Python): Course group project reproducing CVE-2014-0160 on an isolated network, with OpenSSL 1.0.1f beside a patched 1.0.1g control. In progress. https://github.com/0xTaoZ/Heartbleed-CSP-project

**jsonl-lens** (Python): Profiles JSON Lines exports for missing versus null fields, type drift, nested paths and high-cardinality IDs. https://github.com/0xTaoZ/jsonl-lens

## Skills

- **Languages:** Python, Java, C, TypeScript, SQL
- **Security:** AWS CloudTrail, IAM, CloudFormation, Kubernetes, OpenSSH, IOC triage
- **Tools:** Linux, Git, GitHub Actions, pytest/unittest, Cloudflare Workers, React, Astro
- **Spoken:** English C1, German C1, Mandarin (native), Hokkien, Japanese A2