Personal site
I work on mobile platform security, firmware, hardware trust, and low-level systems. This site collects my research, code, talks, and older writing.
An application-level claim is only as good as the lower layers it depends on.
Selected research
Independently found a pre-auth buffer overflow in U-Boot's NFS client — pointer hijack, NFS state-machine takeover, shellcode delivery, full chain and public PoC. It collided with a private report filed a month earlier, so the CVE went to the other reporter.
Patches are upstream, including a second negative-length bug in nfs_read_reply() found on the way.
I used voltage fault injection to bypass RDP2 read-out protection on STM32F2 and extract seed material during boot. Tested on Trezor One and Model T.
I am a named inventor on a U.S. patent for keeping card numbers and PIN entry apart. One design removes PAN data from the merchant device before requesting a PIN. Another separates them across trusted execution environments and payment components.
Public talk
Bugcrowd LevelUp 0x03
Code and experiments
A dated census of SDK code detected in 320 public mobile app binaries. It records code presence, not use, configuration, effectiveness, or market share.
Explore the artifact ↗ 02 / GITHUBPublic code spanning binary analysis, low-level systems, mobile platforms, and security research.
github.com/manizzle ↗ 03 / AI SYSTEMSOrchestrator is a public agent harness with model routing, checkpointed work queues, bounded execution, and independent verification.
Open the repository ↗Writing
Older work on binary packing, ELF disinfection, static analysis, and competitive security.
Open the Saramena blogExtending CodeQL with automatic query generation and the ideas behind the experiment.
Detecting anomalous load segments and recovering the original entry point from PT_NOTE-infected ELF binaries.
A compiler-assisted, function-by-function packing design built with LLVM and libbfd to frustrate static analysis.
An older archive of challenge solutions, exploit notes, and team research.
About
I am a security engineer. My work has included mobile threat signals, payment-terminal hardware, firmware, secure boot, attestation, trusted execution, vulnerability research, and multi-model AI systems.
M.S. Information Security, NYU Tandon. Founding security engineer at SourceDNA (YC S15), acquired by Apple.