I work on security engineering. Everything I learn ends up here.
I have spent close to a decade on the offensive side: offensive AI development, web, internal network, mobile and API penetration testing, red team work and DevSecOps. Everything here is based on public vulnerability reports and experiments in my own lab — these are personal notes. Enjoy the read.
Writing
161 posts · page 5 / 14The Black Widow in the Box: Is a 'Sandbox' Enough for Malware Analysis?
Is a clean VirusTotal report enough? Join me as we dissect malware through static and dynamic analysis, and see why today's threats are smarter than your average sandbox.
When the Clock Stops: A Zero-Day Survival Guide
What happens when you face a vulnerability that doesn't even have a name yet? I'm sharing the story of a 3:00 AM wake-up call and how we handle 'ghost' threats from a Red Team perspective.
A Tale of 'Update.exe': Dissecting Malware in a Lab Environment
Ever wondered if that suspicious binary on your desk is just logging or exfiltrating your entire database? Let's dive into the 'kitchen' work of security and learn how to safely analyze malware.
The Orchestrator or an Insider Trojan? Invisible Dangers in the Kubernetes World
Security has shifted from physical firewalls to the orchestration layer. Let's dive into the dark corners of Kubernetes security—from API Server leaks to RBAC misconfigurations—and talk about how to keep the cluster safe.
Chasing the Unknown: Zero-Day Chaos and the Vulnerabilities That Won't Wait for a Patch
A deep dive into the world of Zero-Day exploits from a Red Teamer's perspective. Learn the anatomy of an attack that bypasses traditional defenses and how we deal with invisible threats.
The Trojan in Your Pocket: Dismantling Mobile App Security from Within
A look into the world of mobile security through the eyes of a Red Teamer, covering common mistakes like hardcoded secrets and the power of dynamic analysis with Frida.
Docker's 'Privileged' Trap: Trojan Horses Inside Containers
Think that --privileged flag is a lifesaver? Think again. Here is how container misconfigurations turn into open doors for attackers, based on my early career blunders and Red Team field experience.
From Docker Socket to Root Shell: Is Container Isolation an Illusion?
A deep dive into how misconfigured Docker containers, privileged flags, and exposed sockets turn your 'secure' environment into a playground for Red Teamers.
Handing Over Your K8s Cluster on a Silver Platter: Config Errors and Cold Hard Truths
Ever wondered how a single YAML line can turn your infrastructure into a public playground? Let's dive into common Kubernetes misconfigurations from a Red Team perspective and look at how to actually secure them.
Betrayal of the Dependencies: The Art of Supply Chain Attacks and Defense
Ever wondered how a single typo in your package.json could compromise your entire infrastructure? Let's dive into the world of Software Supply Chain security and learn how to defend your fortress from the inside out.
The False Peace of the Sandbox: Why Automation Won't Save You in Mobile Security
Automated scans like MobSF aren't a silver bullet. True mobile security requires looking beyond the sandbox and understanding how real attackers bypass 'secure' local storage and SSL pinning.
Fighting an Invisible Enemy: The Zero-Day Paradox and the Art of Defense
A deep dive into the world of Zero-Day vulnerabilities, why patching isn't always enough, and how we can defend against what we can't see.