Research & Experiment Logs

Multi-Agent Negotiation Referee — Baseline-Calibrated LLM Bargaining Evaluation

Concurrent Job Scheduler Debugging — Race Conditions & Timezone-Aware Cron

Debugged a Python job scheduling service backed by PostgreSQL that produced incorrect results under adversarial concurrent timing — fixing race conditions, stale reads, missed triggers, and timezone-aware cron scheduling bugs.

Acoustic Source Localisation — 8-Mic Array with Unknown Clock Offsets

Localised a sound source from 8-microphone outdoor array recordings across 5 independent scenarios, estimating TDOA under unknown bounded per-sensor clock offsets using cross-correlation against a known calibration pulse.

Network Forensics — C2 Detection & Dual-Channel DNS Exfiltration Reconstruction

Investigated a PCAP capture and host logs to identify a compromised host, detect a C2 domain via entropy analysis, and reconstruct an 8-chunk exfiltrated file split across DNS TXT records and HTTP POST bodies.

VM Bytecode Exploitation — Reverse Engineering a Custom ISA ELF Binary

Reverse-engineered a stripped, statically-linked PIE ELF binary running a custom 64-bit VM, discovered a static range verifier vulnerability, derived the vault key, and exploited the service to extract the flag.

Solar-Pressure Three-Body Orbital Dispersion — STM Covariance & Monte Carlo

Derived and implemented the full equations of motion for a spacecraft in the CR3BP with solar radiation pressure and non-spherical gravity harmonics, producing STM covariance forecasts and Monte Carlo ensemble propagations across 12 independent scenarios.

Flask REST API Security Audit & Remediation — Multi-Tenant Order Platform

Audited a multi-tenant Flask order management REST service for security defects — cross-referencing implementation against a formal service specification and remediating all vulnerabilities while preserving full API behaviour.

Telecom CDR Billing Audit — 4-Stage Data Quality Pipeline

Audited a telecommunications CDR Parquet dataset for 4 silent billing pipeline failures — mixed-scale timestamps, duplicate retransmissions, inflated tariff charges, and unrecoverable capacity counts — producing a verified clean dataset and reproducible Jupyter notebook.

Debugging a Dual-Clock Async FIFO in Verilog — CDC & Watermark Logic

Fixed a broken dual-clock asynchronous FIFO Verilog module — correcting Gray code pointer synchronisation, programmable watermark threshold logic, and reset handling across independent clock domains.

ECDSA Nonce Bias Attack — Private Key Recovery & ECIES Decryption

Analysed 830 interleaved ECDSA signatures on secp256k1 to identify devices with firmware-induced nonce bias, recovered their private keys, and decrypted an ECIES-encrypted payload using the recovered key.

Binary Sensor Log Parser — Custom Protocol with CRC-16 Validation

Implemented a full binary parser for a custom SLOG sensor log format — handling dual record layouts, stream framing markers, CRC-16 validation with a non-standard config, and mixed byte-order fields.

AES-128-CBC Padding Oracle Attack — Byte-by-Byte Plaintext Recovery

Implemented a padding oracle attack against AES-128-CBC to recover the full original plaintext byte-by-byte, exploiting PKCS#7 padding validation without the decryption key.

Forensic Recovery of an Encrypted ZFS Mirrored Pool

Recovered an encrypted ZFS mirrored pool from exported loopback device images — identifying valid vdev members, finding the correct decryption keyfile, and rolling back to a specific historical snapshot.

Debugging a Tree-Walking Interpreter Against a Formal Language Spec

Identified and corrected every defect in a tree-walking interpreter for MiniLang, a dynamically-typed scripting language, ensuring faithful compliance with a formal language specification.