The following is a bunch of scattered (hopefully not too scattered) notes from experienced people in the tech industry. Tips regarding creating an effective piece of writing to update a project: Consider person reading this article will spend ~ 5-10 seconds - at most. Example layout: Flashy title TLDR (with some numbers); this also sets the context Impact Next Steps
Article currently in progress. Objective Building a graph-based system to identify and profile software supply chain threat actors by correlating their digital identities across platforms with vulnerable data in open-source software. Review of past group’s work Current Field State Literature review Ideas
Taking initiative and creating the events calendar page for Lally School of Management
here are the following issues currently in prod: canary exists for a binary, but initial crash analysis doesn’t pick it out. potential solution: doing a checksec at the beginning and including that in the final json (crash_data). this will also include important information such as PIE. feature requests: disassembly - pighidra source code integration - sending in the C code to the llm this would be useful for things like figuring out if alloca exists (contractor binary)
11.27.2025 Refactoring code hell. Patrick gave the idea of using exploit.py instead of static .poc file. Take-aways: The AI provides a high-level overview of ./contractor which is good. However, doesn’t get into the nitty-gritty of how exactly its solved. What I’m thinking to solve this: Summarize GDB outputs / summarize the last 5 iterations. Need to include pighidra to get C code in order to make RCA faster. 11.09.2025 Task 1: Create a persistent GDB Session. Should be pretty straight-forward to set up. Task 2: Refactor the code, such that you just use the master_llm to spit out plan + commands, then use a helper LLM to summarize said outputs of commands, so that the master_llm has a smaller context to worry about. Task 3: Integrate pighidra Task 4: Integrate checksec ...
Still a WIP (Work - In - Progress) It was early September, when I reached out to Professor Yener expressing my interest to be involved in security research. Now, a few months into this RCA research, I’m glad through happenstance I reached out. Objective Given a binary, is it possible to create a RCA (Root Cause Analysis) of a binary, given a PoC (Proof of Concept) Background First, what does RCA even mean? ...
Taking the AWS SAA-C03 exam what what I learned from it
Improvement: Using AWS + Selenium and discord webhooks to get insta notifications discretely
Using tampermonkey and discord webhooks to get insta notifications discretely