Security notes
All writing.
Vulnerability analysis, technical fixes, code and short news notes. Public sources and my own lab.
42 posts
- Red Team
Lord of the Leaks: Data Hunting in the Epstein Archives and the Gritty Side of OSINT
Digging through thousands of leaked documents is a nightmare. Here’s how I use OCR and Python to find the signal in the noise. - Red Team
Hunting Digital Footprints: Why Google is Just the Tip of the Iceberg
Forget basic dorking. Let’s talk about how to find the hidden gaps in a company’s attack surface using subdomains and GitHub leaks. - Malware Analysis
That 3 AM Phone Call: The Side of Incident Response You Won't Find in Textbooks
Incident response isn't just about technical steps; it's about managing chaos. Here's what really happens when the SOC calls you at midnight. - DevSecOps
Moving Fast vs. Playing it Safe: The Dirty Laundry of DevSecOps
Is your speed causing security nightmares? From leaked AWS keys to noisy SAST tools, here is the real deal on making DevSecOps actually work for you. - IoT & OT
Did You Actually Code It or Just Vibe It? The Dark Side of AI-Generated Apps
AI makes coding feel like magic, but that "vibe" can be dangerous. Let's talk about why trusting LLMs too much might break your security. - Malware Analysis
Hunting the Silence: Are You Just Waiting or Actually Looking?
Everything looks green on your dashboard, but is it really? Learn why waiting for alarms is a trap and how to start hunting threats instead.