AI Security
A manual appsec & AI Red Teaming assessment of our AI-powered senior project. OTP bypass, visual prompt injection against Gemini 2.5 Flash, and JSON break-out technique one t-shirt recommended for a wedding.
HackTheBox
The HackTheBox Topology machine is an easy-rated Linux box that chains together classic web enumeration, a LaTeX injection vulnerability, credential cracking with John the Ripper, and a gnuplot + cron privilege escalation path.
HackTheBox
GreenHorn is an easy-rated Linux box on HackTheBox. This writeup covers Pluck CMS 4.7.18 RCE via Gitea credential leakage, lateral movement through password reuse, and root privilege escalation by depixelizing a blurred PDF password.
HackTheBox
Windows machine walkthrough: SMB share enumeration, VHD file mounting for SAM credential extraction, and privilege escalation via mRemoteNG password decryption.
HackTheBox
Exploiting the Heartbleed vulnerability (CVE-2014-0160) to leak SSH credentials from memory, then escalating to root by hijacking an active tmux session.
HackTheBox
Joomla CMS exploitation for initial access through admin panel takeover, followed by Linux privilege escalation via curl configuration file abuse.