I work on security engineering. Everything I learn ends up here.
I have spent close to a decade on the offensive side: offensive AI development, web, internal network, mobile and API penetration testing, red team work and DevSecOps. Everything here is based on public vulnerability reports and experiments in my own lab — these are personal notes. Enjoy the read.
Writing
161 posts · page 8 / 14The Silent Killer in the Factory: The Cold Reality of the 'Force Coil' Command in OT Systems
Hacking a server in the IT world leads to data leaks; hacking a system in the OT world leads to physical disasters. Let's dive into the vulnerabilities of Modbus/TCP and why the air-gap myth is dangerous.
Smart Devices, Dumb Security: IoT Backdoors and Silent Takeovers
From a coffee machine trying to talk to a Domain Controller to hardcoded secrets in firmware, let's dive into the Wild West of IoT security from a Red Teamer's perspective.
An Invisible Bullet: Zero-Days and That Fatal Gap in Memory
Zero-Days aren't just Hollywood magic; they are the result of unnoticed logic flaws or memory management slips. Let's dive into the 'Window of Exposure' and how these vulnerabilities actually work under the hood.
The Only Bug Even the Most Expensive Firewall Can’t Patch: The Human Factor
Ever seen a massive security budget get wiped out by a single 'free coffee' link? Let's dive into why the 'human interface' remains our most critical vulnerability and how we, as Red Teamers, look at psychological triggers.
The Browser's Dark Alleys: DOM-Based XSS and the 'It Won't Happen to Me' Delusion
We've spent years hardening our servers, but the battlefield has shifted to the client-side. Let's dive into why your modern SPA might be more vulnerable than you think, focusing on the subtle danger of DOM-based XSS.
The Shadow Creeping Behind the Walls: Anatomy of SSRF and Those 'Innocent' Looking Parameters
A deep dive into Server-Side Request Forgery (SSRF), exploring how 'innocent' URL parameters can lead to full cloud environment compromise, shared from the perspective of a Red Team Lead.
Stop Playing in the Sandbox: Facing the Realities of Malware Analysis
Relying solely on automated sandboxes is a trap. Let's dive into the real-world mindset of malware analysis, covering entropy, static inspection, and why your automated tools might be lying to you.
We Used to Drop the Report and Run, Now We Live Together Inside: The Evolution of Modern Pentesting
Pentesting is no longer just about scanning for vulnerabilities and handing over a PDF. Modern Red Teaming focuses on the 'Assumed Breach' mindset and testing how well the Blue Team actually detects 'Living off the Land' techniques.
The Human Factor: Bypassing the World’s Strongest Firewall with a Cup of Coffee
While we spend millions on security infrastructure, the biggest vulnerability remains the person behind the screen. Let's talk about how social engineering exploits psychology and why it's a Red Teamer's favorite tool.
A Night in the Lab: Why That File Isn’t Behaving Like You’d Expect
Signature-based detection is a thing of the past. Join me in the lab as we dissect how modern malware hides in memory and how we can unmask these 'ghost' scripts using both static and dynamic analysis.
The Trojan in Our Pocket: Getting Blindsided in Mobile App Security
It's past midnight, your Frida scripts are failing, and the app keeps crashing. Think SSL Pinning is an impenetrable wall? Think again. Let's dive into the 'wild' world of mobile security through the lens of a Red Teamer.
You Can't Patch the Human Factor: The Dirty Lab of Social Engineering
Why most phishing simulations are a waste of time and how real-world social engineering actually works—from the art of OSINT to the psychology of pretexting.