SSangharshainnoob6t5.hashnode.dev·Jun 11 · 4 min readPickle Deserialization RCE via Model Upload EndpointLink: https://www.ratctf.com/challenges/synapse-lab This challenge revolves around a classic but still heavily abused primitive: unsafe Python pickle deserialization exposed through a model upload API00
SSangharshainnoob6t5.hashnode.dev·May 12 · 3 min readBeyond the Canvas: Exploiting an Unsanitized Side-Channel in draw.io I don't usually write about my web findings, but I felt this one needed to be documented as a reminder for my future self too. My initial mistake was tunnel-visioning on a direct bypass of the main sa00
SSangharshainnoob6t5.hashnode.dev·Apr 14 · 7 min read How OPT(ADD).Mathematics Builds the Foundation for AI/ML WorldIn this article, I have tried to connect each chapter with insights from teaching and real-world experience in building and analyzing AI systems, showing how these concepts power modern technology and10
SSangharshainnoob6t5.hashnode.dev·Apr 12 · 3 min readDeceptive AI Doesn’t Break the Rules. It Optimizes Around Them.Everyone assumes deception in AI will look obvious. A glitch. A spike. A detectable anomaly. That assumption is wrong. The most effective deception doesn’t violate the system.It stays statistically i00
SSangharshainnoob6t5.hashnode.dev·Jan 3 · 3 min read(QLotto) – HTB CTF WriteupGoal: Predict the hidden “lotto numbers” (qubit 0) based on visible “testing numbers” (qubit 1) and bypass server restrictions. I was messing with mirroring and advanced math but but lmao it was just Anti-correlation and Bitslmao Recon Phase I start...00