• PyTorch ExecuTorch Security Assessment (2026)
  • Public Trail of Bits / OSTIF security review of PyTorch ExecuTorch (on-device inference runtime). I worked on this with other engineers on the engagement team.
  • 42 findings with security impact (8 high, 14 medium, 19 low, 1 undetermined). Primary theme was weak validation of untrusted PTE model files: integer overflows in size/bounds checks leading to multiple memory corruption bugs (heap buffer overflows, out-of-bounds reads/writes), plus unsafe deserialization in Python tooling that enables code execution.
  • Scoped whitebox audit with static analysis and fuzzing of PTE parsing/execution paths; maintainers worked through fixes (report includes fix review).
  • OSTIF: PyTorch ExecuTorch audit complete
  • Full report (PDF)
• PyPI Warehouse Security Assessment (2026)
  • Public Trail of Bits security review of PyPI Warehouse (the app that powers the Python Package Index), organized with the Sovereign Tech Agency. I was the second engineer on this review.
  • 14 findings (2 high). Focus areas included authn/authz, OIDC trusted publishing, package upload/metadata validation, org permission boundaries, and API token lifecycle. Notable issues: authorization gaps (e.g. org members inviting owners, IDOR deleting other users’ API tokens), OIDC anti-replay timing/TOCTOU issues, stale permissions after project transfer, and wheel METADATA not validated against upload-time metadata.
  • Full report (PDF)
• CVE-2025-23310 / CVE-2025-23311 - NVIDIA Triton Inference Server
  • Two critical (CVSS 9.8) stack-based buffer overflow / stack overflow bugs in NVIDIA Triton Inference Server’s HTTP request handling (including inference routes). Specially crafted inputs—amplified via HTTP chunked transfer encoding—could crash the server; impact includes remote code execution, denial of service, information disclosure, and data tampering (CWE-121).
  • Affects Triton on Windows and Linux through 25.06; patched in 25.07 (August 2025). Root cause was unbounded alloca() based on libevent buffer segment count; fix moved allocation to the heap with a safe failure path.
  • Trail of Bits write-up: Uncovering memory corruption in NVIDIA Triton (as a new hire)
  • NVIDIA Security Bulletin: Triton Inference Server — August 2025
• CVE-2025-6031 - Amazon Cloud Cam
  • What was novel: I used captured API traffic and an LLM to help reconstruct a backend platform that had been shut down years earlier. I believe this was a new way to compromise end-of-life hardware (work was done in 2024).
  • While the device was in pairing mode, you could bypass SSL pinning and connect it to any network. This allowed an attacker to intercept and change its network traffic.
  • AWS Security Bulletin AWS-2025-013
  • DistrictCon Junkyard presentation
• Multiple Advisories in SAP Products
• CVE-2014-9320
  • I found this critical SAP BusinessObjects privilege escalation by fuzzing its native protocol. It allowed a guest user to gain full administrator privileges.
  • SAP Advisory 2039905
• Denial of Service XML Expansion (CVE-2014-8080)
  • I found this critical denial-of-service vulnerability in core Ruby. Because the vulnerable feature was enabled by default, an unauthenticated remote attacker could crash any Rails installation. I did not publicize its severity at the time.
• CVE-2014-5265, CVE-2014-5266, CVE-2014-5267
  • I found the original XML-RPC denial-of-service exploit. It affected all versions of Drupal and WordPress.
• SAP HANA Web-based Development Workbench Code Injection (SAP Advisory 2015446)
• Unauthenticated Username Enumeration in Business Objects (SAP Advisory 2001109)
• Unauthenticated Remote Crash of Business Objects (CVE-2014-8310)
  • I found this unauthenticated remote crash by fuzzing the native SAP BusinessObjects protocol.
  • SAP Advisory 2001106
• Information Disclosure in Business Objects (CVE-2014-8311)
  • SAP Advisory 1998990
• XSS in Business Objects (CVE-2014-8308)
  • SAP Advisory 1941562
• Multiple XSS in SAP HANA (CVE-2014-8314)
  • SAP Advisory 2009696
• Multiple XSS in SAP HANA (CVE-2014-5172)
  • SAP Advisory 1993349
• Multiple XSS in SAP BO (CVE-2014-3134)
  • SAP Advisory 1931399
• Multiple Advisories in SAP Products
• CVE-2010-0219
  • Although classified as a default-password issue, the vulnerable application shipped with many products and allowed straightforward remote code execution out of the box. I also created a Metasploit module for it.
  • SAP Advisory 1432881
• FCKEditor.NET File Upload Code Execution

Selected Bug Bounties

I have had a mixed experience with bug bounties. I think in total I have received a bounty or Hall of Fame from 40+ companies; not a ton but enough to see some of the good and bad. Below are some programs I really enjoyed participating with.

AT&T

Top 50 hacker at one point.

Bugcrowd MVP 2018

• I had enough bugs to get MVP 2019 as well, but one of the programs unfairly gave me a negative rating which dropped me below the threshold

Mozilla

• I had a limited number of bounties with Mozilla but at one point I held the record for highest payout on a single bounty. It allowed a guest to access admin credentials through a desync attack.

Tesla

HP

• I had a handful of critical bugs in hardware including remote code execution but the details are unfortunately private.

IBM

Slack