ArticleAutomatic Litter Box – On Hold for Now
My automatic litter box project is temporarily on hold after my 3D printer broke. While waiting for replacement parts, I’ve shifted back to improving…
Knowledge base
Blog
Practical security research, write-ups, guides, and lessons learned.
- 200
- Entries
Explore
Blog Posts
Page 1 of 17Next →
Article
ArticleRunning ComfyUI on AMD GPUs with ROCm (Pop!_OS / Ubuntu)
Documented a clean, ROCm only setup for running ComfyUI on AMD GPUs. Covers installing ROCm, locking PyTorch to ROCm builds, blocking CUDA entirely,…
ArticleSQL injection with filter bypass via XML encoding
Used UNION based SQL injection to bypass a WAF, extract usernames and passwords from the users table, and retrieve the administrator’s credentials. S…
ArticleDOM XSS in jQuery anchor href attribute sink using location.search source
Identified a DOM based XSS vulnerability in the feedback page caused by unsafe jQuery handling of the returnPath URL parameter. By injecting a javasc…
ArticleBlind SQL injection with out-of-band data exfiltration
Exploiting an asynchronous, blind SQL injection vulnerability via Out of Band (OAST) techniques, where the application's TrackingId cookie triggers a…
ArticleBlind SQL injection with out-of-band interaction
exploiting an asynchronous, blind SQL injection vulnerability in a tracking cookie via Out of Band (OOB) techniques. It uses Oracle's EXTRACTVALUE an…
ArticleBlind SQL injection with time delays and information retrieval
I think I already made this one time but I re done the lesson in order to keep the memory fresh
ArticleDOM XSS in innerHTML sink using source location.search
DOM XSS: untrusted location.search is written to innerHTML, enabling script execution. I tested <script alert("hello")</script and <img src=x onerror…
ArticleReflected XSS into HTML context with nothing encoded
Reflected XSS discovered in a search field where user input is rendered unencoded in the HTML response. Injecting a simple <script alert("hello")</sc…
ArticleStored XSS into HTML context with nothing encoded
Stored XSS in blog comments: user input is persisted and rendered into HTML with no sanitization or encoding. Submitting a payload like <svg/onload=a…
ArticleDeep dive: TCP, subnets, and Active Directory — the fundamentals a penetration tester must master
A deep dive into TCP/IP internals, CIDR math, packet reverse engineering, and Active Directory architecture. Focused on core networking concepts and…
ArticleBuilt a Microsoft 365 Email Viewer for my company
Standalone company project: a React + Tailwind Microsoft 365 Email Viewer using MSAL (OAuth2/PKCE) to sign in and fetch mail via Microsoft Graph. Cli…