Research & Privacy Focus — Rayane Nour (ريان نور)

01. Binary Analysis & Reverse Engineering

Understanding compiled software without source code is fundamental to security research. My work involves static decompilation and dynamic runtime instrumentation across ELF (Linux) and PE (Windows) executables.

Core Methodologies

Control Flow Graph (CFG) analysis, function boundary recovery, compiler artifact identification, anti-analysis detection, and unpacking obfuscated binary payloads.

Disassemblers & Decompilers: Ghidra, IDA Pro, Radare2 / Cutter, and Binary Ninja.
Dynamic Debugging: GDB with Pwndbg and GEF extensions, LLDB, and x64dbg.
Binary Formats: Deep inspection of ELF segments, GOT/PLT relocation tables, and PE Import/Export structures.

02. Vulnerability Research & Memory Safety

Investigating native memory corruption primitives, evaluating mitigation efficacy, and researching structural defenses against modern exploitation techniques.

Focus Primitives

Stack & Heap buffer overflows, Out-of-Bounds (OOB) memory access, Use-After-Free (UAF), Type Confusion, Race conditions, and Format String vulnerabilities.

Mitigation Analysis: Address Space Layout Randomization (ASLR), Data Execution Prevention (DEP / NX), Stack Canaries, Relocation Read-Only (RELRO), and Control Flow Guard (CFG).
Fuzzing & Sanitizers: Coverage-guided instrumentation with AFL++, LibFuzzer, and Clang Sanitizers (AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer).
Memory-Safe Alternatives: Designing secure architectures using Rust's borrow checker and type-system guarantees to eliminate entire classes of memory vulnerabilities by default.

03. Systems Programming & Diagnostics

Building reliable, high-performance diagnostic tools requires operating close to the hardware and operating system kernel. I specialize in crafting zero-dependency utilities that communicate directly with native OS interfaces.

Kernel & OS Interfaces

Direct Linux syscall invocation, procfs parsing, socket state inspection (TCP/UDP socket tables), ptrace process control, and native Win32/NT API dispatch.

Zero-Dependency Design: Developing tools relying strictly on standard libraries and OS system calls, eliminating supply-chain attack vectors.
Performance Optimization: Lock-free concurrency, minimal memory footprint (< 500 KB binaries), and instant startup times.

04. Digital Privacy & Anti-Surveillance Engineering

Researching techniques and architectures to protect user privacy against mass surveillance, unwanted telemetry, and metadata extraction.

Privacy Research Pillars

Architectural isolation of sensitive data, offline-by-default execution, network traffic fingerprint minimization, and local-first data integrity.

Zero-Telemetry Architecture: Designing tools that operate completely offline with zero analytical phoning home.
Metadata Minimization: Auditing network-bound protocols to eliminate leaking hardware identifiers, IP footprints, and timestamps.
System Hardening: Applying kernel security parameters, seccomp filters, and namespace isolation to confine untrusted applications.

05. Responsible Disclosure Policy

All vulnerability research conducted is governed by the principles of coordinated and responsible disclosure:

Disclosure Guidelines

Vulnerabilities discovered in third-party software are reported confidentially to vendor security teams with clear, reproducible Proof-of-Concepts (PoCs) and a reasonable remediation window before public advisory release.