A detailed look at every project in the lab.
Engineered a fuzzer to detect memory corruption vulnerabilities (Heap UAF, Invalid Writes) in 64-bit Linux ELF binaries applicable to embedded and firmware security testing.
Built a hardware-based wireless lab using Raspberry Pi to simulate Evil Twin attacks and capture WPA2 handshakes for offline cracking.
Conducted web pentesting covering OWASP Top 10 (SQLi, XSS, IDOR, SSRF) using Burp Suite on DVWA and HackTheBox platforms.
Created proof-of-concept malware simulation in an isolated lab to study browser credential theft, persistence techniques, and process obfuscation.
Sanitized, NDA-compliant adversarial testing framework for frontier LLMs — covering jailbreak taxonomy, prompt injection, automated adversarial suites, and multimodal attack surface analysis.
Interactive browser-based tool that demonstrates everything a website can legitimately collect from your browser — IP, hardware, GPU, fingerprint and more. No dependencies, no tracking.
Embedded automated vulnerability scans (SAST, dependency checks) into CI/CD pipelines, reducing insecure code merges across ML microservices at Dell Technologies.
An interactive JSON Web Token analysis tool. Paste a token to decode its claims, surface signing and configuration weaknesses, recover weak HMAC secrets by dictionary attack, and forge a valid token to demonstrate the impact — a from-scratch JOSE implementation with no cryptographic dependencies.
An interactive, fully client-side lab covering six SQL injection classes — pick an attack, craft a payload, and watch the query, database, and result set react in real time.