Hacking, research, and writings.
I am a computer science PhD student at UT Dallas, advised by Prof. Blaine Hoak. My research interests include prediction, real-world modeling, uncertainty quantification, adversarial machine learning, and reinforcement learning.
Previously, I co-founded Vector0, which was acquired by Stratascale (an SHI company). I’ve spent more than a decade in information security, primarily offensive work, where I discovered multiple CVEs and co-authored the open-source C2 framework DeimosC2.
IEEE International Conference on Development and Learning (ICDL), — accepted; proceedings forthcoming
Reconstructing infants’ 3D body shape and movement from synchronized video views to identify posture, count steps, and measure gait timing.
Master’s thesis, The University of Texas at Austin,
Reconstructing infant movement in 3D from video to measure behavior and train physics-based models for developmental science research.
Blogs, technical notes, and walkthroughs from past projects.
Jul 6, 2020
Tracing the authentication bypass and HyperSQL abuse that enabled unauthenticated RCE on vulnerable F5 BIG-IP TMUI deployments.
Apr 6, 2020
CVE-2020-11543 detailing how a shared OpsRamp Gateway credential granted unauthenticated root SSH access across deployments.
Mar 23, 2020
Bypassing the Infinias eIDC32 controller login by forging the client-side key exchange and taking over the administrative interface.
Jul 16, 2019
Leveraging lax ACLs and DLL hijacking in multiple ManageEngine products to escalate from user access to SYSTEM.
Jul 2, 2019
Reverse engineering Zipato's authentication to reuse password hashes, extract hard-coded SSH keys, and remotely unlock doors.
Mar 26, 2019
Enumerating valid ADSelfService Plus usernames through divergent error messages and documenting the vendor response.
Jan 22, 2019
Using signed Microsoft tooling and HTA payloads to run PowerShell in memory, persist, and evade traditional defenses.
Dec 27, 2018
Full disclosure of Guardzilla's shared S3 credentials, testing evidence, and remediation guidance for the affected cameras.
Dec 27, 2018
Uncovering hard-coded AWS keys inside the Guardzilla security system firmware and coordinating disclosure.
May 26, 2018
Static analysis of a shellcode-heavy binary leveraging dynamic imports, file IO, and XOR decoding.
May 25, 2018
Reverse engineering a compact Windows binary to recover an obfuscated flag using IDA Pro and Python.
May 8, 2018
Exploring the attack surface created by Excel's custom JavaScript functions and building a proof-of-concept miner.
