Nic P. Jones

Detects invisible and lookalike Unicode characters

• —Detects ASCII smuggling, emoji payloads, Trojan Source bidi overrides, zero-width characters and homoglyphs
• —Decodes hidden prompt-injection payloads and sanitizes LLM input with auditable profiles
• —Zero-dependency Python library and CLI with bundled Unicode 18.0 tables, published to PyPI
• —Ships as a GitHub Action and pre-commit hook for CI and supply-chain scanning

App that adds FCC amateur radio licenses to Apple Wallet and Google Wallet

• —Built with Next.js and TypeScript
• —Integrated with Apple Wallet and Google Wallet APIs
• —Deployed with SST

Serverless bot that subscribes Discord channels to GitHub repository events

• —Built with AWS Lambda and AWS SQS
• —Integrated GitHub Webhooks and Discord APIs
• —Serverless architecture for scalability

Security research organization developing proof-of-concept exploits for known CVEs.

• —CVE-2025-29927: Next.js Middleware Authorization Bypass
• —CVE-2022-25765: pdfkit Command Injection
• —CVE-2021-22204: ExifTool Arbitrary Code Execution
• —CVE-2020-5844: Pandora FMS Remote Code Execution
• —CVE-2021-3560: Polkit Local Privilege Escalation

My Portable User Interface For Cyber Security Awareness was the example of mastery to graduate my senior year at Sussex Technical High School. It has a physical aspect which is a portable kiosk engineered specifically to view the website with a touchscreen interface.

• —Built with Linux and Raspberry Pi
• —Custom touchscreen kiosk interface
• —Information Security Awareness training platform
• —Senior capstone project