Uncover the Unknown.
Elite security write-ups, zero-day research, and modern software engineering deep dives. For those who build, break, and secure.
Active Directory Kerberoasting Deep Dive
An elite breakdown of Kerberos authentication flaws, Service Principal Name (SPN) extraction, and offline ticket cracking techniques used by advanced persistent threats.
SQL Injection to RCE via File Upload
Chaining a blind boolean-based SQL injection with an insecure file upload mechanism to achieve unauthenticated Remote Code Execution on a hardened target.
Building an Asynchronous Fast-API Gateway
Architecting a highly concurrent, secure, and resilient API gateway using FastAPI, Redis token bucket rate limiting, and structured JSON logging.
Bypassing EDR: Direct Syscalls & Unhooking
An exploration of modern Endpoint Detection and Response (EDR) evasion techniques, focusing on NTDLL unhooking and the implementation of direct system calls in C++.