Information Security @ CMU
HTTP server written from raw sockets in C, with five intentional memory-corruption bugs including stack overflow, format string, integer-overflow leading to heap overflow, use-after-free and double-free, and an out-of-bounds write. Built matching PoCs for each, then compiled the same source under Fil-C, a capability-based memory-safe C compiler, to compare undefined behavior against deterministic runtime fault isolation.
Dynamic memory allocator in C, built from starter code on an implicit free list. Added an explicit free list (LIFO), segregated free lists by size class, boundary-tag footer removal on allocated blocks, and a better-fit algorithm, improving utilization and throughput over the baseline scoring full on the lab.
An autonomous red team drop box to test security of enterprise networks when plugged in to an exposed ethernet cable, carries various types of attacks like subnets, port scan, stealthy service scans, LLMNR/NBT-NS Poisoning, SMB enumeration, AS-REP Kerberoasting gathering all sensitive data to simulate a real engagement.
Password Vault built with LAMP Stack and security by design with policies like password hashing, data encryption (AES-CBC), prepared statements to prevent SQLi attacks and strict input validation.
Python automation script auditing and applying CIS Benchmark configurations across Linux systems, distinguishing automated remediation from steps requiring manual review.
Several other writeups on HTB machines and CTFs that are not published.