ai
Building my own AI Agents
From frustration with existing frameworks to building my own agent in under 72 hours — what I learned about memory, SDKs, and the real complexity of AI agents.
Research Journal
Analysis, methodologies, and technical perspectives on contemporary security challenges.
WordPress
Investigating a Compromised WordPress Site
Diagnosing a WordPress site compromise that was redirecting visitors to adult content and pharmaceutical spam through injected malicious scripts.
golang
Hookd: A Lightweight Out-of-Band Interaction Server
Hookd - A simple webhook server for testing and debugging.
devops
Simple Monitoring Solution
Setting up simple monitoring for your services.
web3
Smart Contract Testing in Remix
Testing smart contracts using Remix IDE.
web3
Ethernaut - Dex Two
Solving the Ethernaut DEX Two challenge.
web3
Damn Vulnerable Defi : The Rewarder
Solving The Rewarder challenge from Damn Vulnerable DeFi.
web3
Damn Vulnerable Defi : Side Entrance
Solving the Side Entrance challenge from Damn Vulnerable DeFi.
web3
Damn Vulnerable Defi : Truster
Solving the Truster challenge from Damn Vulnerable DeFi.
web3
Damn Vulnerable Defi : Naive Receiver
Solving the Naive Receiver challenge from Damn Vulnerable DeFi.
code-review
Collaborative Code Auditing
Setting up a collaborative code auditing environment using code-server.
web3
Damn Vulnerable Defi : Unstoppable
Solving the Unstoppable challenge from Damn Vulnerable DeFi.
bugbounty
Extract and monitor bugbounty scopes
Extracting and monitoring bug bounty scopes automatically.
blogging
Blogging in 2025: My Thoughts
My journey through various blogging platforms over seven years and why I finally settled on Hugo with GitHub Pages.
bugbounty
Bruteforce vs Permutations
Comparing subdomain bruteforce and permutation techniques using Regulator, DNSGen, and AlterX to find the most effective reconnaissance strategy.
bugbounty
Basic recon to RCE III
Exploiting command injection through Ruby string interpolation in a Rails application to achieve RCE via DNS exfiltration.
bugbounty
DNS Tools Comparison
Comparing Amass, DNSX, and PureDNS for DNS resolution accuracy and performance in bug bounty reconnaissance.
bugbounty
Basic recon to RCE II
How trusting my instincts led to discovering a critical RCE that everyone else missed on a popular bug bounty program.
bugbounty
My bounty infrastructure
A complete Docker-based infrastructure for bug bounty hunting featuring Traefik, XSS-Catcher, Rengine, and more.
bugbounty
Basic recon to RCE
How I discovered my first RCE through basic reconnaissance and exploiting a known Java deserialization vulnerability in Adobe ColdFusion.
bugbounty
SSRF Through PDF Generation
Exploiting a Server-Side Request Forgery vulnerability through WKHTMLTOPDF to access AWS metadata and local files.
bugbounty
My first OOB XXE exploitation
Exploiting a blind Out-of-Band XXE vulnerability to exfiltrate sensitive data despite misleading error messages.
golang
Binary search in Golang on large files
Implementing binary search in Go to efficiently search through a 550 million line file in seconds instead of hours.
No articles match this filter.