ABOUT THE AUTHOR — 2026

Turning security problems
into verifiable engineering.

I’m Lyscf (Chang Sun), a student developer working across security, reverse engineering, and automated systems. This is where I document the research I pursue, the tools I build, and some of my own thinking along the way.

A little about me.

I study Information Security at Lanzhou University. My interests sit between offensive security and systems engineering: understanding how attacks work and how programs behave, then turning that understanding into tools and workflows that are reliable, repeatable, and useful over time.

I have spent years working on CTF challenges and practical security exercises, alongside building tools in Go and Python. My work includes reverse engineering, penetration testing, and malware analysis. I care less about following a particular technology trend than about problem boundaries, evidence quality, state ownership, and how a system behaves outside a demo.

Questions I work on

01

Security Engineering

Turning attack-surface discovery, validation, and evidence collection into repeatable engineering workflows.

02

Automated Pentesting

Exploring task boundaries, execution state, evidence trails, and controlled concurrency in large-scale assessments.

03

Reverse Engineering

Recovering structure and behavior from complex artifacts, compiled outputs, and runtime traces.

04

Agent Systems

Understanding the boundary between harnesses, tool infrastructure, and model capability—beyond prompts alone.

ELSEWHERE / 04

Get in touch

If you are interested in security engineering, automated analysis, or the design of complex systems, I’d be glad to hear from you.