Security Engineering
Turning attack-surface discovery, validation, and evidence collection into repeatable engineering workflows.
I’m Lyscf (Chang Sun), a student developer working across security, reverse engineering, and automated systems. This is where I document the research I pursue, the tools I build, and some of my own thinking along the way.
I study Information Security at Lanzhou University. My interests sit between offensive security and systems engineering: understanding how attacks work and how programs behave, then turning that understanding into tools and workflows that are reliable, repeatable, and useful over time.
I have spent years working on CTF challenges and practical security exercises, alongside building tools in Go and Python. My work includes reverse engineering, penetration testing, and malware analysis. I care less about following a particular technology trend than about problem boundaries, evidence quality, state ownership, and how a system behaves outside a demo.
Turning attack-surface discovery, validation, and evidence collection into repeatable engineering workflows.
Exploring task boundaries, execution state, evidence trails, and controlled concurrency in large-scale assessments.
Recovering structure and behavior from complex artifacts, compiled outputs, and runtime traces.
Understanding the boundary between harnesses, tool infrastructure, and model capability—beyond prompts alone.
A platform exploring reliable execution for long-running security campaigns through scheduling, journaling, work units, and traceable evidence.
An automated analysis workflow for a specialized artifact format found in engineering environments.
Emulating VPN remote access in a controlled environment to capture authentication and protocol behavior, and building an attack-behavior dataset.
If you are interested in security engineering, automated analysis, or the design of complex systems, I’d be glad to hear from you.