Articles & analysis

Writing.

Published work, alongside future notes on pentesting and AI security papers.

05 Nov 2026
Understanding LLM Authz Architectures: Part 1 ↗
LLM's · Hashnode
A series on evolution of LLM Authz architectures
LLM'sllm security
30 Oct 2026
TryHackMe Writeup: Kenobi ↗
tryhackme · Hashnode
Room: Kenobi ( Starting with a full service scan: Scan the machine with nmap, how many ports are open? 7 The suggested smb-enum-shares script had…
tryhackmeTryHackMe Walkthrough
27 Oct 2026
TryHackeMe Writeup: Bruteit ↗
tryhackme · Hashnode
Room url: Running a full port scan with service detection: Enumerating hidden directories: Hidden directory found: /admin
tryhackmeTryHackMe Walkthrough
26 Oct 2026
TryHackeMe Writeup: Lookup ↗
Blog · Hashnode
A web-based challenge covering username enumeration, credential brute-forcing, a known CVE in a file manager, and SUID binary abuse for privilege…
Blog
23 Oct 2026
TryHackMe Writeup: Pickle Rick ↗
TryHackMe Walkthrough · Hashnode
Writeup for pickle rick room
TryHackMe Walkthroughtryhackme
21 Oct 2026
Nmap: The when and whys ↗
Blog · Hashnode
The first step in getting to know your target in almost every pentesting assignment is getting to know your target. Almost everyone one of you who has done…
Blog
30 Mar 2026
Axios compromised: hijacked maintainer account pushes malicious npm versions ↗
Supply chain security · Endor Labs
Co-written with Kiran Raj.
Supply chain securityMalwarenpm
09 Jan 2026
Host header validation bypass in Undertow ↗
Vulnerability analysis · Endor Labs
An analysis of CVE-2025-12543.
Vulnerability analysisHTTPJava
12 Dec 2025
When a broken fix leads to RCE: Argo Workflows ↗
Vulnerability research · Endor Labs
Co-written with Cris Staicu.
Vulnerability researchRCEArgo Workflows
12 Dec 2025
When regex isn’t enough: remote code execution in pgAdmin ↗
Vulnerability research · Endor Labs
A write-up of CVE-2025-13780.
Vulnerability researchRCEpgAdmin
06 Nov 2025
Critical SQL injection vulnerability in Django ↗
Vulnerability analysis · Endor Labs
An analysis of CVE-2025-64459.
Vulnerability analysisSQL injectionDjango
09 Jun 2025
SQL injection in LlamaIndex ↗
AI security · Endor Labs
How LLM-powered applications can expose vector stores to SQL injection.
AI securitySQL injectionLLMs
20 May 2025
SAML single sign-on bypass in samlify ↗
Vulnerability analysis · Endor Labs
An analysis of CVE-2025-47949.
Vulnerability analysisAuthenticationSAML
13 Mar 2021
SageMath : Installation ↗
Open source · Cyberdummy · WordPress
Notes on installing SageMath from source on Ubuntu and getting started with open-source contributions.
SageMathOpen sourceLinux
04 Feb 2020
HackTM CTF 2020 ↗
Cryptography · Cyberdummy · WordPress
Write-ups of three cryptography challenges from HackTM CTF 2020, played with Team Shakti.
CTFCryptographyRSA
12 Aug 2019
de1ctf-2019 ↗
Cryptography · Cyberdummy · WordPress
A write-up of the BabyRSA challenge from de1ctf 2019.
CTFCryptographyRSA
02 Jul 2019
ISITDTUCTF 2019- Matrix(Programming) ↗
CTF write-ups · Cyberdummy · WordPress
Reversing matrix and string transformations in the ISITDTUCTF 2019 Matrix programming challenge.
CTFProgrammingAlgorithms
03 Jan 2019
Defusing the Binary Bombs! ↗
Reverse engineering · Cyberdummy · WordPress
A walkthrough of the six phases of the CMU Binary Bomb Lab using disassembly and debugging.
Reverse engineeringAssemblyBinary analysis
Notes
Digital forensics notes ↗
Digital forensics · Personal notes
Course notes from an earlier exploration of digital forensics, including acquisition, memory, mobile, and OS artifacts.
Digital forensicsNotes