Security Research

Follow the reasoning, examine the evidence, and understand what the finding means.

Public investigations connect a technical question with a controlled test and an explainable result. Lab material is labelled as lab work; live research follows written authorization and the relevant disclosure rules.

From question to evidence

Establish the boundary.

Define the allowed surface, the question being investigated, and the rules for testing.

Reproduce the finding.

Preserve the observations and reasoning another analyst needs to verify the result.

Explain the consequence.

Connect impact with practical remediation. Publish only when scope and disclosure rules allow it.

Read with context

The investigations below are sanitized public material. They demonstrate methodology and lab outcomes, rather than claims about client engagements. For older CTF walkthroughs, visit the writeup archive.

Explore the notes