Home Experience Projects Write-ups Blog Download Resume

Blog

Technical articles, tutorials, and security insights.

Research
May 24, 2026

npm Security: 2FA & Staged Publishing

As a security engineer, I appreciate the recent efforts by GitHub to enhance the security of the npm ecosystem. The introduction of 2FA-gated …

3 min read Read →
Research
May 22, 2026

Inactive Google API Keys Still Active

As a security engineer, I was alarmed to learn that Google API keys can still be used for a significant amount of time after they have been deleted. …

3 min read Read →
Research
May 21, 2026

Exploiting ZKTeco CCTV Cameras

As a security engineer, I recently came across a vulnerability in ZKTeco CCTV cameras that could lead to information disclosure, including capture of …

3 min read Read →
Research
May 19, 2026

Exploiting Siemens ROS# Vulnerability

The Siemens ROS# contains a ROS service file_server that is vulnerable to a path traversal attack. This vulnerability affects versions prior to 2.2.2. …

2 min read Read →