Website: svegas18.me
Email: svv232@nyu.edu
Github: github.com/svv232

Horus

• 1/25 - Current
  Pluggable framework that queries and puts “the internet” into a gigantic DB which can then be queried as new “template vulnerabilities” are found. Currently locates dangling DNS domains and publicly facing Docker Registries. Recieved Bug Bounties on 2 Alexa top1000 domains and have reported bounties to over 15 large corporations.

KLEENEX

• 7/18 - 8/18
  C++ wrapper around KLEE and AFL for intelligent, coverage guided fuzzing. Developed while doing research at MWR Infosecurity. Path analysis was used to generate test cases, and mutation based fuzzing techniques were applied to these initial test cases.

1nsanity

• 4/18- 8/18
  1nsanity is a LLVM pass that obfuscates against symbolic execution. It includes mathematical obfuscation, bogus control flow injection, and tacks on additional complexity to switch cases and branch instructions. It uses the Collatz Conjecture as an opaque predicate.

PiBrain Assistant

• 11/17 - Current
  Modeling an encoder and decoder neural network to simulate language understanding in a virtual assistant; written with tensorflow and powered by GPUs and AWS.

Security Intern at MWR Infosecurity an F-Secure Company <5/18 - 8/18>

Performed Web Application and Network Segmentation Tests on a real world attack surface. Produced research on dynamic test case generation and coverage guided fuzzing with KLEE and AFL. Published a blog-post with my findings and research results. Learned advanced web hacking techniques from a great mentor and a fantastic team. My Research

Software Engineer at PiBrain <11/17 - 2/18>

Seq2Seq implementation using tensorflow and neural machine translation to build a cost effective assistant for small businesses Pibrain site

OSIRIS Lab Researcher and NYUSEC CTF Team Member <12/16 - Current>

Cybersecurity research lab and NYU CTF Team. Currently runs CSAW, HSF, and practices modern day exploitation. Osiris site

CSAW 2018: Organizer and Problem Writer CSAW 2017: Organizer and Problem Writer HSF 2017: Problem Writer

C/C++: Writing high performance code, LLVM API, SDL and Object Oriented Ideas
LLVM: Advanced usage of LLVM tools and compiler IR
Rust: Fast, memory safe code; decent understanding of package format and libraries
Python 2.7/3.5/3.6: Advanced understanding of language and modules such as: multiprocessing, subprocess, heapq, itertools, collections, and numpy
Bash: Advanced command line usage for scripting and pen-testing
HTML: Building structured webpages
SQL: Designing and implementing relational dbs with sqlalchemy
CSS: Adding pretty, colored design to webpages and applications
Javascript: Adept at using npm packages and website scripting to efficiently interact with web servers and v8 command line tool

Reverse Engineering/Binary Exploitation: KLEE, AFL, BinaryNinja, IDA-pro, Angr, Pwntools, Manticore, Apktool, Windbg, Pwndbg, GDB
Web: Burp Suite, Kali Linux, Nessus, Metasploit, SQLmap, Heroku, Flask, MySQL/SQLAlchemy, Jekyll, Apache, Facebook API, Git
ML: Tensorflow, Openai API
Package Managers/Containers: Cargo, Docker
Creative: Processing, Particles.js

New York University; B.S in Computer Science <2016 - 2020 (expected)>