Security Research &
CTF Write-Ups
Offensive security breakdowns, CTF challenge solutions, cloud infrastructure playbooks, and automated security tooling dispatches.
05 Dispatches
Updated weekly with live CTF walkthroughsCloud & Web
OWASP Top 10 + Server Lockdown100% Free
Executable code snippets includedActive
Verified Technical RunbooksALL DISPATCHES
Complete archive of write-ups & research
THM ARTICLE
TryHackMe walkthroughs & room breakdowns
HTB ARTICLE
HackTheBox labs & exploit analysis
REAL WORLD CASE STUDY
Production migrations & incident audits
RESEARCH
Vulnerability analysis & security papers
Bypassing WAF & JWT Algorithm Flaws in Web CTF Challenge
"Deep-dive analysis on exploiting weak JWT key signing algorithms (none algorithm attack) and crafting dynamic payloads to bypass strict WAF filters."
header = {'alg': 'none', 'typ': 'JWT'}
payload = {'user': 'admin', 'role': 'root'}Production Linux Server Lockdown: IPTables, SSH Hardening & UFW
"Step-by-step security playbook to lock down fresh Ubuntu/Debian instances on AWS/DigitalOcean before running public production traffic."
sudo ufw default deny incoming sudo ufw allow 22/tcp sudo ufw enable
Building an Automated Subdomain Recon Engine in Async Python
"Engineering a high-performance, multi-threaded Python CLI utility for rapid target enumeration, live port checking, and web screenshotting."
async def fetch_dns(domain):
async with aiohttp.ClientSession() as session:
...Eliminating Phishing Risks: Strict SPF, DKIM, & DMARC Enforce Mode
"Complete operational guide to configure DMARC p=reject without breaking legitimate marketing email deliverability or corporate mailboxes."
v=DMARC1; p=reject; rua=mailto:dmarc-reports@domain.com; pct=100
Linux Privilege Escalation via Abused SUID Binaries & Cron Jobs
"Walkthrough of local privilege escalation techniques from low-privilege shell access to root privilege in a hardened Linux environment."
find / -perm -4000 -type f 2>/dev/null