Technical deep-dives into CTF rooms and CVE analysis
This section contains detailed write-ups of my cybersecurity research and penetration testing exercises. Each write-up demonstrates my ability to identify vulnerabilities, exploit security flaws, and provide comprehensive documentation suitable for security teams and prospective employers.
Vulnhub Box
A web application where administrators click on links uploaded by the user allows for a man in the middle attack.
Red Team Reconnaissance & Blue Team Defense
Performing passive reconnaissance techniques gives the penetration tester a map of potential attack surfaces. It is imperative to minimize the resources exposed on public records.
Read Full Write-up →Copy Fail
A single 732-byte python script successfully gives an unprivileged user root access. This impacts Linux kernel versions from 4.14 through 6.19.12. The script takes advantage of a logic flaw and requires zero race conditions or timing windows.
Read Full Analysis →