Research
AI ResearchOpen research & toolingCybersecurityFree Reports
Focus Areas
OFFENSIVE SECURITYAutomotive Security TestingIoT & Firmware TestingUAV & Drone SecurityAPPLICATION SECURITYWeb & Mobile SecurityAI FOR PUBLIC SAFETYGEOINTTrainingsLinux Usermode Exploitation 101
PublicationsAbout UsContact Us
Publications

Latest research notes

Write-ups from both research tracks — AI for public safety and independent cybersecurity research.

All AI for public safety Blog CVEs Exploit Dev Exploits Free Reports
2023-06-16 Blog CVE-2023-37152: Online Art gallery project 1.0 – Arbitrary File Upload (Unauthenticated) Affected Product Online Art gallery project Affected version 1.0 CVE ID CVE-2023-37152 Vulnerability Type Arbitrary File Upload (Unauthenticated) Type WEBAPPS Description Online Art Gallery Project... 2023-06-13 Blog CVE-2023-36256: Online Examination System Project 1.0 – Cross-site request forgery (CSRF) Affected Product Online Examination System Project Affected version 1.0 CVE ID CVE-2023-36256 Vulnerability Type Cross-site request forgery (CSRF) Type WEBAPPS Description The Online Examination System... 2020-11-29 Blog CVE-2020-29168: Online Doctor Appointment Booking System PHP and Mysql 1.0 – ‘q’ SQL Injection An SQL injection vulnerability was discovered in PHP Doctor Appointment System by me on 11/16/2020. In ‘getuser.php’ file, GET parameter ‘q’ is vulnerable. The vulnerability... 2019-04-12 Blog Walkthrough: Legacy (HTB Retired Box) Legacy is a retired machine at the beginner level that shows SMB’s possible security threats in Windows OS. 2018-12-05 Blog Walkthrough: Lame (HTB Retired Box) Lame is a retired Linux machine that is rated as Easy on Hack the Box. There are many ways to get flags, but I will demonstrate one of the easiest ways. 2018-01-16 Free Reports Automotive Security Insights An in-depth analysis of common vulnerabilities in modern automotive systems and mitigation strategies. 2018-01-16 Free Reports IoT Device Threat Report Security review of IoT devices, firmware flaws, and exploitation scenarios. 2018-01-16 Our Services Automotive Security Testing Penetration testing of vehicle ECUs, CAN networks, and connected car systems. 2018-01-16 Our Services UAV & Drone Security Security assessments of UAV communication systems, control protocols, and onboard systems. 2018-01-16 Our Services IoT & Firmware Testing Comprehensive testing of IoT devices, firmware reverse engineering, and vulnerability discovery.

Access from the European Union/UK is restricted

This system is not offered to EU, UK, or EEA users.

This system is a non-EU research prototype and is not offered to individuals or entities within the European Union, United Kingdom, or European Economic Area. No services are provided to users in these jurisdictions, and no personal data from EU/UK/EEA data subjects is intended to be processed.