RESEARCHER / DEVELOPER

Zhang Boxiang 张博翔

Information Security · Hainan University

I investigate software and network vulnerabilities with program analysis, AI-assisted tooling and reproducible evidence.

Email me GitHub Writing

01 / RESEARCH

Research interests 研究方向

From vulnerable code paths to packet-level evidence, I build tools that make security findings easier to verify.

AI-assisted code auditingVulnerability researchProtocol analysis

PureAutoCodeQL Featured research

Question
How can code-audit agents trace vulnerabilities across files?
Method
CodeQL source–sink modeling with CVE-guided analysis.
Evidence
SARIF, QL queries, selected paths and a run manifest preserve a reviewable trail.

02 / EDUCATION

Education 教育经历

  1. 2027 —

    University of Chinese Academy of Sciences

    Master's Degree · UCAS · 中国科学院大学

  2. 2023 — 2027

    Hainan University

    Bachelor's Degree in Information Security · HNU · 海南大学

03 / PROJECTS

Selected work 代表项目

Open-source research and engineering.

01

AI FOR SECURITY · PROGRAM ANALYSIS

PureAutoCodeQL

A multi-agent approach to vulnerability analysis with CodeQL, connecting CVE intelligence, source–sink modeling and cross-file path exploration.

View project
02

NETWORK SECURITY · OPEN SOURCE

Wireshark-MCP

Composable TShark tools that help language-model agents inspect protocols, reconstruct streams and locate frame-level evidence.

View project

04 / HONORS

Honors & awards 竞赛荣誉

Selected competition results.

  1. 2026National Second Prize中国高校智能机器人创意大赛 · 软件系统安全赛
  2. 2025National First Prize上海市“磐石行动”全国高校安全攻防赛
  3. 2025National Third Prize · Team Lead第九届强网杯全国网络安全挑战赛 · 行业领域专项赛
  4. 202510th Place Nationwide · Team Lead西工大“铸剑杯”全国大学生网络安全竞赛

05 / WRITING

Selected writing 研究笔记精选

All posts
  1. 2025CodeQL 入门：数据库创建与常用查询CodeQL静态污点分析、数据库创建（Python/C++）和查询执行完整实践指南，包含AI4CodeQL项目经验总结。
  2. 2026CNVD-2026-20654: LG NAS 远程命令注入漏洞分析深入分析 LG NAS 设备中的 OS 命令注入漏洞（CNVD-2026-20654），包括漏洞原理、本地环境搭建、真实设备利用过程及影响范围评估。
  3. 2025NTLM 协议与常见攻击手法梳理深入分析NTLM协议及其常见的攻击手法，包括NTLM中继、哈希传递等，并提供相应的防御策略。

06 / LATEST

Recent updates 最近更新

Writing archive
  1. ARTICLECyberGym: Beyond the Leaderboard
  2. ARTICLEThreat Model
  3. HONORNational Second Prize · 中国高校智能机器人创意大赛软件系统安全赛
  4. ONGOINGPROJECTWireshark-MCP · open-source development