“Why do academic depth and field experience feel like a trade-off ? What should CTIS students actually optimize for ? How do you discover where your real value is before it becomes too late ?” Hi folks, today I want to talk about something I keep seeing around me at university. Moreover, I
ai-security
Hi folks, yesterday, walking to my departmental party, I caught myself thinking about a question that’s been following me through every AI security engagement or the works in professional life I’ve worked on: Why can I break it ? ,but I never fully explain why it broke? Some said
AI Security
Greetings everyone, it was a really really difficult period for me to produce & share and interpret findings especially for ClosetMate Senior Year application’s mobile application security testing in advance. We took two consecutive days filled with 8.30 to 17.30 for demo day. Plus, lecture hours regularly
AI Security
A manual appsec & AI Red Teaming assessment of our AI-powered senior project. OTP bypass, visual prompt injection against Gemini 2.5 Flash, and JSON break-out technique one t-shirt recommended for a wedding.
HackTheBox
The HackTheBox Topology machine is an easy-rated Linux box that chains together classic web enumeration, a LaTeX injection vulnerability, credential cracking with John the Ripper, and a gnuplot + cron privilege escalation path.
HackTheBox
GreenHorn is an easy-rated Linux box on HackTheBox. This writeup covers Pluck CMS 4.7.18 RCE via Gitea credential leakage, lateral movement through password reuse, and root privilege escalation by depixelizing a blurred PDF password.