01
2026.05.01
The Agent Is Not the Scanner: Making AI Security Agents Better
Eight months of testing security agents taught me that more scaffolding is not always better. Here’s where skills and MCP helped, where they hurt, ...
↗
02
2024.08.11
Analyzing a Compromised Linux Machine
A hands-on review of a deliberately compromised Linux host: SQL injection, stored XSS, exposed services, backdoor accounts, and the evidence behind...
↗
03
2024.08.05
Vajra Spy - An Android Malware
My first malware analysis: decompiling VajraSpy, tracing its Android workers, and finding how it collects files, messages, contacts, and call logs.
↗
FILE / Archive
Archive
Everything I’ve published, newest first.