Application Security
Focused work on authentication abuse, insecure workflows, SSRF, IDOR, business logic flaws, and API risk review.
This page keeps the site feeling fresh without crowding the homepage. It holds the new research areas, project growth, and long-term goals in a clean and structured format.
Focused work on authentication abuse, insecure workflows, SSRF, IDOR, business logic flaws, and API risk review.
Continuous work around privilege escalation paths, service discovery, real-world recon, and practical lab-based learning.
Review of IAM risks, public exposure, over-permissive configs, and blast-radius analysis in modern cloud environments.
Tracking new CVEs, exploit activity, security advisories, and practical notes that help convert research into usable knowledge.
The site is evolving into a stronger knowledge base with structured writeups, project showcases, and safer browsing patterns.
Next steps include a more refined roadmap page, tool library, research notes, and stronger visual storytelling.