I am a proud open source contributor to the Unikraft project. Unikraft is a Linux Foundation project that is capable of generating extremely light, but simultaneously powerful taylored unikernels. One can think of these as autogenerated operating systems mimized to be able to run one user application only. As such, a lot of the bloat in traditional operating systems can be removed. This also minimizes the attack surface and hence improves security.

Discovered a vulnerability in which some of the timing modules were offloaded to client side software to reduce load on the server. This allowed me to inject Javascript and sign up for classes before other students. I also had the ability to drop students out of and assign students to any course of my choice. This vulnerability was reported and although I never got an official response, the vulnerability was mitigated several weeks later.

Each locality has its own rules about COVID benefits and the process to apply for them. iQualify presents a fast questionaire to determine approximately how much an individual will qualify for and then automatically provides the forms that need to be filled out in order to receive those benefits.

An extremely lightweight and stealthy remote access trojan (RAT) for MacOSX. It has the ability to initiate a reverse tcp shell, sniff network packets, spoof system dialogs, process inject, and more. If the command and control (C2) server goes down, the RAT is capable of switching to a previously unknown live server without communicating with the attacker.

During COVID, a lot of local restaurants were struggling to establish a web prescence and market themselves online in order to stay in business. LocoEats allows a user to search for food they want from locally owned restaurants. I set up the backend server and developed the algorithm that distinguishes between locally owned restaurants and chains based on a variety of heuristics.

An academic project where we had to extend an operating system to support threads, user programs, virtual memory, priority scheduling, and a multithreaded file system. Due to academic integrity concerns, the source code of this project cannot be publically shared, but the technical documentation for the project is linked to this card.

A lightweight Java jar file that autodeploys from an Attiny85 usb chip. After deploying on a Windows machine, the payload is capable of decrypting all saved user credentials and uploading the plain text to a preconfigured DropBox account. The payload then attempts to persist so that any user that logs into the computer afterwards will also be compromised.

An interactive portfolio to showcase what I have been working on. It's the lightweight, yet powerful website that you're on right now. There are several optimizations under the hood to handle a variety of devices and internet connections. Load times have been stress tested against everything from 2G to high speed internet.