Gouki Williams

Computer Science student at Mt. San Jacinto College pursuing transfer to CSUSB, focused on vulnerability research, binary exploitation, and reverse engineering. CompTIA Security+ certified, with published research on discrepancies between checksec's NX verdicts and Linux kernel stack-execution behavior.

$ readelf -lW bins/RW-RWE.out

Index Type Offset MemSiz Flg Align
0 PHDR 0x000040 0x000310 R 0x8
1 INTERP 0x000374 0x00001c R 0x1
2 LOAD 0x000000 0x000718 R 0x1000
3 LOAD 0x001000 0x0002d5 RE 0x1000
4 LOAD 0x002000 0x0001b0 R 0x1000
5 LOAD 0x002d98 0x000370 RW 0x1000
6 DYNAMIC 0x002da8 0x0001f0 RW 0x8
7 GNU_STACK 0x000000 0x000000 RW 0x4
8 NOTE 0x002160 0x000030 R 0x8
9 NOTE 0x002190 0x000020 R 0x4
10 GNU_PROPERTY 0x002160 0x000030 R 0x8
11 GNU_EH_FRAME 0x002030 0x000044 R 0x4
12 GNU_STACK 0x000000 0x000000 RWE 0x10
13 GNU_RELRO 0x002d98 0x000268 R 0x1

Research

checksec NX / PT_GNU_STACK divergence

Finding: On crafted ELF binaries, checksec's NX detection diverges from the Linux kernel. The kernel honors the last PT_GNU_STACK's execute bit PF_X. Across multiple header and non-standard flag cases, all four tested builds report a kernel executable stack as "NX enabled" (false assurance) in at least one of the cases.

Result
BuildAlgorithmRW-RWERWE-RW__E_W_ & R__RW
Go main (269453e)first matchFalse assuranceFalse alarmOKOKOK
Go latest (71012bf)any non-XFalse assuranceOKOKOKOK
Bash 2.6.0 (2753ebb)any RWEOKFalse alarmFalse assuranceOKOK
Bash main (269453e)metadata of all RWFalse assuranceFalse alarmOKFalse alarmOK
Linux kernellast-winsexecutablenon-execexecutablenon-execnon-exec

Technical Skills

Exploitation
ROP chains, ret2libc, address leaks and GOT-based information disclosure, ASLR bypass, null-free shellcode, heap exploitation (tcache poisoning, safe-linking)
Reverse Engineering
x86-64 assembly, ELF internals and loader behavior, static/dynamic analysis, custom file-format analysis
Programming
C, Python, Java, Bash
Tools
Binary Ninja, GDB/pwndbg, readelf, ROPgadget, Docker, Wireshark, Burp Suite, Kali Linux
Languages
English, Japanese (fluent)

Projects & Training

  • pwn.college: Yellow Belt in Reverse Engineering and Binary Exploitation.
  • Pocket CTF (in progress): Developing a portable, battery-powered Raspberry Pi appliance that hosts offline binary exploitation challenges over its own Wi-Fi access point for cybersecurity club training.
  • District-wide CTF: Founded and organized a competition to expand the local student cybersecurity community.

Leadership & Awards

  • Inland Empire Mayors Cyber Cup: 1st Place, 2026; recognized by the City of Temecula.
  • National Cyber League, Fall 2025: 22nd/1,046 high school individuals; 114th/7,876 overall individuals; 7th/446 high school teams; 31st/4,214 overall teams.
  • CyberPatriot | Vice President & Instructor: Taught Linux system administration and hardening; mentored competitors for CyberPatriot, National Cyber League, and Mayors Cyber Cup.

Certifications

CompTIA Security+ (SY0-701) | August 2026

Education

Mt. San Jacinto College | Computer Science, Associate in Science for Transfer (AS-T)

Transfer pathway: B.S. Computer Science, Cybersecurity concentration, California State University, San Bernardino

About

I was initially drawn to cybersecurity because hacking seemed interesting, but I stayed because I became fascinated by understanding what happens beneath the abstractions we use every day. I enjoy discovering unexpected behavior, understanding why systems fail, and contributing findings that other researchers can build upon.

I'm particularly interested in investigating how ELF binaries are loaded and executed in virtualized environments, how the different layers of abstraction interact with the host system, and where discrepancies between these layers may introduce unexpected behavior or security implications.

I approach technical problems by questioning assumptions and investigating behavior at the implementation level. In my checksec NX-mismatch research, I examined how security tools interpreted ELF program headers and compared that behavior with how the Linux kernel loads binaries. Rather than relying on a tool's output, I wanted to understand the underlying mechanisms and verify the behavior through experimentation.

I'm interested in connecting with security researchers and engineers working on vulnerability research, reverse engineering, binary analysis, and Linux internals. I'm also open to research collaborations and internship opportunities where I can contribute to technically challenging security projects and continue developing my expertise.

Contact