AAAdithyan Arun Kumarinadithyanak.com·Apr 6 · 5 min readContext-Level Secret Isolation for AI Coding Agents with AgentmaskOnce a secret enters the agent's context window, the attack surface is wide open: Prompt injection via external tools - a compromised MCP server, a malicious package README, or a crafted API response00
AAAdithyan Arun Kumarinadithyanak.com·Apr 1, 2025 · 5 min readRAGAS v.0.2.14 Arbitrary File Read VulnerabilityThe Arbitrary File Read in RAGAS was introduced in multimodal eval support feature of release v0.2.3. This vulnerability affects all the versions from v0.2.3 to v0.2.14 (latest) The vulnerability arises because URL provided in retrieved_contexts is i...00
AAAdithyan Arun Kumarinadithyanak.com·Mar 31, 2025 · 3 min readStealthy PowerShell Shellcode Execution: Diskless Techniques with UnsafeNativeMethodsPowerShell is a versatile scripting language commonly used for system administration, automation, and penetration testing. In certain scenarios, executing shellcode in memory without touching the disk can be advantageous, especially for evading detec...00
AAAdithyan Arun Kumarinadithyanak.com·Mar 31, 2025 · 4 min readBypassing Antivirus Detection with Unusual Windows APIs, Delayed Timers, and EncryptionIn this blog post, we will walk through the construction of a C# console application that incorporates several advanced features, including sleep timers, the use of a non-emulated API FlsAlloc, and Caesar cipher encryption. Lets build the code step b...00
