2025 Bloomberg Fellow | PhD Student @ Purdue | Artiphishell (AIxCC finalist) | Ex @trailofbits, @netbsd🧑🏻💻 | CTF w/ @teambi0s @shellphish 🚩 | GSoC '18, '19
West Lafayette, Indiana
Joined February 2017
- Tweets117
- Following337
- Followers548
- Likes925
Thrilled to receive the Bloomberg Ph.D. Fellowship!
A massive shoutout to my advisors (@anton00b & @machiry_msidc) for all their support and guidance!
Huge thanks to @jvanegue and @s_hamedgh for this opportunity!
Feel free to checkout my research below!
Congrats to @PurdueCS / @purseclab’s Siddharth Muralee (@Tr3x) on being one of the 2025-2026 @Bloomberg Infrastructure & Security Ph.D. Fellows!
Learn about Siddharth's research focus and the whole Infrastructure & Security Ph.D. Fellows cohort: bloom.bg/3QlrIdW
WE DIT IT! Qualified for finals!!
Looking forward to spending more time improving our CRS - “ARTIPHISHELL”. Look out for us at Defcon 2025!
Excited to be a part of this team! Looking forward to the upcoming semifinals at @defcon
Introducing ARTIPHISHELL! An LLM-Based Cyber Reasoning System made by @shellphish that autonomously finds and patches vulnerabilities for the @DARPA AIxCC competition (support.shellphish.net)
We published a codeQL query to identify similar patterns to the regreSSHion vulnerability. It was fun to work on this!
Async-unsafe signal handlers are at the core of the recent regreSSHion vulnerability (CVE-2024-6387). We published a new CodeQL query that searches for this often overlooked class of bugs.
github.com/trailofbits/codeq…
Siddharth M retweeted
Thrilled to announce I'll be joining the CS Department at Indiana University, Bloomington (@IUBloomington, @IULuddy) as an Assistant Professor in Fall 2024. Huge thanks to my mentors and beloved family members for their unwavering support. Super excited about this new chapter!
Check out this really cool binary patching tool developed right here in our lab @PurSecLab
I am happy to announce Patcherex2 (github.com/purseclab/Patcher…), an easy-to-use, Python-based binary patching tool, designed to be extensible and compatible with multiple architectures.
The code was mainly written by my student @__Han_Dai__ at @PurdueCS, for the DARPA AMP program.
Siddharth M retweeted
Had a great time presenting our research on Abusive Dropshipping at #NDSS2024 @NDSSSymposium during the Usable Security session! Work done with Andrew Chu, @mozgurozmen, @HabibaFarrukh @ZBerkayCelik .
Siddharth M retweeted
Congratulations to the @b01lers undergraduate team at Purdue for winning iCTF 2023, organized by the @ACTION_NSF_AI !
This was a week-long competition with challenges at the intersection between AI and security.
Siddharth M retweeted
I am recruiting multiple Ph.D. students to join my group at @UCIrvine CS. We will be exploring various security and privacy challenges for emerging computing platforms. Feel free to reach out for more details and/or spread the word.
Apply by Dec 15: ics.uci.edu/graduate-admissi….
Had a great time presenting at @nullcon, about our research on Securing CI/CD pipelines. It was a pleasure to interact with folks from the community and definitely looking forward to be back next year!
Excited to announce that I will be presenting our paper - "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions" at @USENIXSecurity. ARGUS is the first static taint analysis system for identifying vulnerabilities in GitHub Actions. #usesec23
Our tool ARGUS is now open sourced at github.com/purs3lab/Argus and can be used to determine whether your workflows are secure. We welcome contributions from other security researchers and the open source community in general.
To learn more about our work, please attend our presentation @ Usenix Security on Friday at 3:45pm. Our website - secureci.org/argus contains more details. Work done in collaboration with @machiry_msidc @anton00b @willenck @bradreaves @kapravel @kigibek
Siddharth M retweeted
Excited to announce that our work on dropshipping abuse as a business model was accepted to @NDSSSymposium 2024! Work done with Andrew Chu, @mozgurozmen, @HabibaFarrukh , @ZBerkayCelik . More details to come soon :)
Siddharth M retweeted
📢📢I am delighted to share that I have successfully defended my Ph.D. thesis at @PurdueCS. As to what’s next: Starting in Fall 2023, I will join the University of California, Irvine, as an Assistant Professor in the Department of Computer Science @UCIbrenICS. (1/3)
Siddharth M retweeted
#PurdueCS | @PurdueECE #usesec22
📰Characterizing the Security of Github CI Workflows
👥Igibek Koishybayev, Aleksandr Nahapetyan, Bradley Reaves, Alexandros Kapravelos, Raima Zachariah, Siddharth Muralee, Aravind Machiry
🔗usenix.org/conference/usenix…
