Mt. San Jacinto College | Computer Science, Associate in Science for Transfer (AS-T)
Expected May 2027
Transfer pathway: B.S. Computer Science, Cybersecurity concentration, California State University, San Bernardino
Computer Science student at Mt. San Jacinto College pursuing transfer to CSUSB, focused on vulnerability research, binary exploitation, and reverse engineering. CompTIA Security+ certified, with published research on discrepancies between checksec's NX verdicts and Linux kernel stack-execution behavior.
$ readelf -lW bins/RW-RWE.out
| Index | Type | Offset | MemSiz | Flg | Align |
|---|---|---|---|---|---|
| 0 | PHDR | 0x000040 | 0x000310 | R | 0x8 |
| 1 | INTERP | 0x000374 | 0x00001c | R | 0x1 |
| 2 | LOAD | 0x000000 | 0x000718 | R | 0x1000 |
| 3 | LOAD | 0x001000 | 0x0002d5 | RE | 0x1000 |
| 4 | LOAD | 0x002000 | 0x0001b0 | R | 0x1000 |
| 5 | LOAD | 0x002d98 | 0x000370 | RW | 0x1000 |
| 6 | DYNAMIC | 0x002da8 | 0x0001f0 | RW | 0x8 |
| 7 | GNU_STACK | 0x000000 | 0x000000 | RW | 0x4 |
| 8 | NOTE | 0x002160 | 0x000030 | R | 0x8 |
| 9 | NOTE | 0x002190 | 0x000020 | R | 0x4 |
| 10 | GNU_PROPERTY | 0x002160 | 0x000030 | R | 0x8 |
| 11 | GNU_EH_FRAME | 0x002030 | 0x000044 | R | 0x4 |
| 12 | GNU_STACK | 0x000000 | 0x000000 | RWE | 0x10 |
| 13 | GNU_RELRO | 0x002d98 | 0x000268 | R | 0x1 |
Finding: On crafted ELF binaries, checksec's NX detection diverges from the Linux kernel. The kernel honors the last PT_GNU_STACK's execute bit PF_X. Across multiple header and non-standard flag cases, all four tested builds report a kernel executable stack as "NX enabled" (false assurance) in at least one of the cases.
| Build | Algorithm | RW-RWE | RWE-RW | __E | _W_ & R__ | RW |
|---|---|---|---|---|---|---|
| Go main (269453e) | first match | False assurance | False alarm | OK | OK | OK |
| Go latest (71012bf) | any non-X | False assurance | OK | OK | OK | OK |
| Bash 2.6.0 (2753ebb) | any RWE | OK | False alarm | False assurance | OK | OK |
| Bash main (269453e) | metadata of all RW | False assurance | False alarm | OK | False alarm | OK |
| Linux kernel | last-wins | executable | non-exec | executable | non-exec | non-exec |
CompTIA Security+ (SY0-701) | August 2026
Mt. San Jacinto College | Computer Science, Associate in Science for Transfer (AS-T)
Expected May 2027
Transfer pathway: B.S. Computer Science, Cybersecurity concentration, California State University, San Bernardino
I was initially drawn to cybersecurity because hacking seemed interesting, but I stayed because I became fascinated by understanding what happens beneath the abstractions we use every day. I enjoy discovering unexpected behavior, understanding why systems fail, and contributing findings that other researchers can build upon.
I'm particularly interested in investigating how ELF binaries are loaded and executed in virtualized environments, how the different layers of abstraction interact with the host system, and where discrepancies between these layers may introduce unexpected behavior or security implications.
I approach technical problems by questioning assumptions and investigating behavior at the implementation level. In my checksec NX-mismatch research, I examined how security tools interpreted ELF program headers and compared that behavior with how the Linux kernel loads binaries. Rather than relying on a tool's output, I wanted to understand the underlying mechanisms and verify the behavior through experimentation.
I'm interested in connecting with security researchers and engineers working on vulnerability research, reverse engineering, binary analysis, and Linux internals. I'm also open to research collaborations and internship opportunities where I can contribute to technically challenging security projects and continue developing my expertise.