Security Blogs
Reverse Analytics Lookup: Connecting Domains Through Shared Tags
How I use shared analytics identifiers as OSINT leads, account for historical data, and avoid treating a common tag as proof of ownership.
Security Blogs
Everyday security posts, research notes, and general write-ups.
Security Blogs
XSS Payloads in JSP: Why the Output Context Matters
How I evaluate a small set of historical XSS probes and separate WAF behavior from a browser-confirmed application vulnerability.
Security Blogs
40 Security Research Resources, Grouped by the Question They Answer
A practical directory for infrastructure research, threat intelligence, code search, and historical context, with corrections to older entries.
Security Blogs
Sliver C2: Setting Up a Small Windows and Linux Lab
How I separate Sliver servers, operator clients, and implants, then build a bounded lab with evidence for each connection step.
Security Blogs
Download Website Files Recursively with Wget
How I use Wget to download linked files under a web directory, control recursion, and check what was saved.
Security Blogs
Deep Learning for Threat Detection: Reading the Evidence Before the Accuracy Claim
How I read a survey of deep learning for threat detection, distinguish research claims from deployment evidence, and evaluate practical tradeoffs.
Security Blogs
Reading RAND on the Operational Feasibility of Adversarial AI Attacks
Why I separate an adversarial example in a paper from a feasible attack on a deployed system, and how that changes my risk assessment.
Security Blogs
Donut Shellcode: Understanding the Loader and Testing Detection Claims
What Donut generates, how its managed-code loader works, and the evidence I need before describing any endpoint protection bypass.
All 8 posts shown