A curated set. Each one started with a question, ended with a measured answer, and lives in a repo with notes.
exp-01adversarial ml
Break the Bot
Q: how easily can a chatbot’s instructions be hijacked?
Method: 9 prompt-injection techniques against llama-3.3-70b-versatile via the Groq API, plus hidden-instruction smuggling through local Ollama models.
Result: multiple working bypasses, documented with a 29-page end-to-end attack report.
exp-02adversarial ml
Data Poisoning, Measured
Q: how little poisoned data does it take to own a classifier?
Method: injected a 1% poisoned subset into training data and measured targeted attack success against a held-out test set.
Result: 1% poison → 90%+ attack success, with accuracy slipping only 97.22% → 96.94% — the scary kind of stealthy.
exp-03defense
SOC Monitoring Lab
Q: can I run enterprise-grade detection from my bedroom?
Method: home lab with Wazuh (dashboard, indexer, Filebeat), pfSense firewall, Squid proxy, ClamAV, and Syslog-NG; EICAR-based detection validation.
Result: working SIEM with custom rules, MITRE ATT&CK-mapped playbooks, and an AI alert-enrichment pipeline.
View repository
exp-04model security
The Backdoored Model
Q: what happens when you pickle.load() a stranger’s model?
Method: crafted malicious pickle payloads, scanned them with picklescan and Fickling, and compared against SafeTensors as the safe path.
Result: reliable RCE on load — and a clear, repeatable case for never trusting serialized models.
View repository
exp-05cloud
Serverless Cost Calculator
Q: can serverless be this simple?
Method: Azure Functions API (Python 3.13, Functions Core Tools) with a clean REST endpoint, deployed from the Decode Labs cloud internship.
Result: live API + static frontend, open-sourced with docs.
- Azure Functions
- Python
- REST
View repository
exp-06in development
GenCode Learning
Q: what would learning to code look like if it were built for students like me?
Method: early-stage education platform — Next.js + TypeScript + Tailwind frontend, Supabase backend. Co-founded with a partner; currently in active development.
Status: building in the open. No launch claims until there’s something to show.
- Next.js
- TypeScript
- Supabase
