Research

Write-ups, reproductions, and things I’ve been investigating.

Current questions span autonomous security testing, tool and connector permissions, prompt injection, and API access control. Current focus · Hackbot

• Jul 2026 Breaking Flyto's MCP Recipe Runner: A Path Traversal Vulnerability

  A disclosed path traversal in flyto-core’s MCP recipe runner that crossed the bundled recipe boundary.

  Published finding · Vulnerability Research · path traversal, vulnerability research, MCP, filesystem security

• Dec 2025 React2Shell: CVE-2025-55182 Technical Analysis

  Exploring deserialization, prototype traversal, and the React2Shell exploit chain in a reproducible lab.

  Technical analysis · Security Engineering · React, deserialization, CVE analysis

• Nov 2025 Container Escape: From Enumeration to Host Root

  A practical note on container boundaries and the configurations that commonly collapse them.

  Research note · Security Engineering · containers, isolation, Linux

• Oct 2025 Breaking Authentication: Bcrypt Truncation & Email Normalization

  How bcrypt's 72-byte limit and inconsistent email normalization combined into a CTF authentication bypass.

  CTF note · Vulnerability Research · authentication, bcrypt, input normalization

• Sep 2025 Exploiting Symlink Upload and Session Forgery

  Chaining symlink upload, secret disclosure, session forgery, and path traversal in a CTF challenge.

  CTF note · Vulnerability Research · CTF, symlinks, session security

• Aug 2025 Exploiting CVE-2025-29744: When Prepared Statements Aren't Safe

  A pg-promise SQL injection reproduction exploring negative numeric formatting and PostgreSQL comment syntax.

  Technical analysis · Vulnerability Research · SQL injection, PostgreSQL, CVE analysis

No published work matches this selection yet.

NotesOriginal blog archiveRSS