Comprehensive analysis of access control vulnerabilities including vertical/horizontal privilege escalation, IDOR, parameter manipulation, platform misconfigurations, and multi-step process bypasses with practical exploitation techniques.
Comprehensive analysis of SQL injection vulnerabilities including UNION-based attacks, blind SQLi (conditional responses, errors, time delays), error-based exploitation, database enumeration, and filter bypass techniques with practical Python examples.
Comprehensive analysis of authentication vulnerabilities including username enumeration, brute-force bypasses, 2FA logic flaws, password reset poisoning, and session management weaknesses with practical exploitation techniques.
A walkthrough of solving all 8 levels of Lakera's Gandalf challenge, exploring escalating LLM defenses and creative bypass techniques for prompt injection attacks.
Designing behavioral detection rules in Splunk Enterprise to identify multi-stage cloud breaches across the AWS Kill Chain using the Invictus IR dataset.
Internship project building a Git compatibility layer that enforces cryptographic verification and trust policies for software supply chain security.
Forensic reconstruction of a simulated AWS breach using CloudTrail logs, tracing attacker movement from compromised credentials to S3 data exfiltration.
Comprehensive HIPAA risk assessment of a healthcare provider's AWS CloudFormation template, identifying 14 non-compliant controls and providing actionable remediations.
Deploying and securing a hybrid AWS-GCP application, diagnosing configuration errors, and implementing zero-trust recommendations for cross-cloud connectivity.
Analyzing a critical vulnerability chain where SSRF exploitation leads to IMDS credential theft, lateral movement via S3, and full Lambda function compromise.
Research combining autoencoder-based anomaly detection with federated learning for privacy-preserving IoT intrusion detection, including adversarial robustness analysis.
Designing a lightweight authentication protocol using Physically Unclonable Functions (PUFs) to secure resource-constrained IoT devices against MAC spoofing and replay attacks.