home

Theo H

Theo Halpern

:

Georgia Tech CS Major from Seattle. Interested in building software of any kind!

instagramyoutubediscordgithubDevpostSpotifyLinkedIn

Work

  1. Meta
    Role
    Meta SWE Intern
    Date
    Summer 2026
  2. Uber
    Role
    Software Engineer Intern
    Date
    Winter 2026
  3. Meta
    Role
    Meta SWE Intern
    Date
    Summer 2025
  4. Georgia Tech College Of Computing
    Role
    Teaching Assitant
    Date
  5. Meta
    Role
    Meta University Engineering Intern
    Date
    Summer 2024
  6. CodeAdvantage
    Role
    After School Coding Instructor
    Date
    Jan 2024 — May 2024
  7. iD Tech Camps
    Role
    Counselor
    Date
  8. Strome Jewish Community Center
    Role
    Counselor
    Date

School

  1. Georgia Institute of Technology
    Role
    Student
    Date
  2. George Washington University
    Role
    Student
    Date
  3. South Seattle College
    Role
    Student
    Date
  4. West Seattle High School
    Role
    Student
    Date
  5. Seattle Country Day School
    Role
    Student
    Date

CTF Challenges

Two security challenges I wrote for WRECKCTF 2025. Download the handouts and try them yourself.

Web · GraphQL

Awesome Graphql Blog

I hear the admins have a secret relationship. What might they be hiding in their private blog posts?

Includes source code and Docker setup instructions. Run the intentionally vulnerable blog locally with dummy data.

Download web challenge (.tar.gz)
Run locally with Docker

Extract the download, open a terminal in the extracted folder, then run:

docker build -t theo-graphql-blog ./server
docker run --rm --name theo-graphql-blog --memory=256m --cpus=0.5 --pids-limit=128 -p 127.0.0.1:4000:4000 theo-graphql-blog

Open localhost:4000. Stop with Ctrl+C; restarting the container resets the challenge. Keep it on localhost.

Reverse engineering · STM32

homemadepasskey

XYZ corp won’t tell employees their own passwords. Instead, IT hands out homemade USB “passkeys” that type their credentials. Unfortunately, the firmware leaked.

Inspect the ARM firmware in a reverse-engineering tool such as Ghidra. No hardware or running service required.

Download firmware (.elf)

Projects

BikeBuddy
A modular bike safety system with turn, hazard, and brake lights, rear-view video, speed tracking, and navigation. I integrated the ESP32 camera and TFT display, designed the mounts, and eliminated brownouts through careful wiring and soldering. Winner of the HackGT 12 Hardware Track.
Calm Connect clinic dashboard
Calm Connect
An AI receptionist for therapists that manages SMS patient intake and scheduling. I built Next.js server components for calendar availability and clinic and therapist management, configured Twilio phone numbers, and contributed to prompt engineering.
a photo of the interacted building map from indoor maps
Indoor Maps
My Capstone project at my Meta U internship. Design shareble and searchable maps of any building. Worked solo for 5 weeks to build a webapp that uses Postgres + Prisma + TypeGraphQL + Apollo Server + Express + JWT cookies + ts-Relay + Leaflet + Geoman + Vite React + Jest / 100% TS and ES6.
a photo of a group tab saver new tab
Group Tab Saver
An extermely handy chrome new tab that allows users to save entire tab groups that update live with use. The days of keeping all of your tabs open all the time is over.
the animated Detector Injector logo
Detector Injector
Gone are the days of faulty AI detection software, with DetectorInjector teachers gain the tool to combat rising AI usage. This tool embeds hidden prompt injections in assignemts so when students copy into LLMs the result will be poisoned. Won 3rd place at Georgetown HoyaHacks 2024.
WildTrek
WildTrek is a pwa that motivates you to get outside, explore the wilderness, and learn more about nature. It allows users to upload pictures and if you are 13+, you can share them with people around you.
picture of buildonary.live
Buildonary.live
Buildonary.live is voxel-based pictionary game on the web. The game plays like Skribbl.io but with a 3D twist. It is built with HTML/Css/JS, node.js, and socket.io.
picture of Tiktok auto embed
The TikTok Auto Embed bot will automatically embed the tiktoks links you send. It is in 3500 servers and has helped users over 300k times. It is built with python and discord.py.
picture of Solar Taxicab
Solar Taxicab, the game where you fairy passengers from planet to planet, avoid and shoot aliens, and try and make a huge amount of money. This game won $1000 in replit's game jam.
picture of the nft grafatti wall banner
My Graffiti Walls are non-static NFTs that can be graffitied (a limited number of times). This project won $1667 and was runner up for most creative in Hello NFT World: OpenSea x Replit Hackathon.
picture of this website
this website was made with next.js, react, and tailwind