Identified and reported a critical account enumeration vulnerability on a university system that exposed PII and security questions for over 233,000 users. Developed a proof-of-concept script that exploited the flaw, enabling an unauthenticated user to extract all data in under 60 hours.

Developed a browser-integrated tool using Python and Java to extend Burp Suite’s capabilities by detecting HTTP header misconfigurations in real time, specifically flagging insecure Set-Cookie attributes and server disclosures. Used this tool to support the application security team at GuidePoint Security.

Built a script that can extract all user data from an Outlook organization within seconds. I also scraped supplemental data from different websites while also cutting processing time from 14 hours to under 20 minutes using custom algorithms.

Developed a real-time external bot that used API data, image recognition, and screen segmentation to automate gameplay, intelligently placing troops using algorithms I built and in-game strategy.

Built a fully automated solver for WordScapes that identifies letter tiles on-screen, calculates all valid permutations, and submits solutions using simulated mouse and keyboard input.