---
title: "loulu (@yyn) | Hashnode"
description: "Offensive & Security Research. Read the latest articles by loulu on Hashnode."
url: "https://hashnode.com/@yyn"
---

@yyn

# loulu

@yyn · Joined November 2025

Offensive & Security Research

### [Overview and Methodology](https://loulu1ou.hashnode.dev/overview-and-methodology?utm_source=hashnode&utm_medium=feed)

Purpose: Establish the model for the entire AD attack lifecycle. Prerequisites for the Overall attack Starting Access Level What You Can Do Typical Entry Methods True External OSINT credential g

2 min read · [loulu1ou.hashnode.dev](https://loulu1ou.hashnode.dev/overview-and-methodology?utm_source=hashnode&utm_medium=feed)

[Jul 15](https://hashnode.com/posts/overview-and-methodology/6a56e60c251f50000e059b06)

### [ARM64 Assembly & Shellcode Basics (From File I/O to Reverse Shell)](https://loulu1ou.hashnode.dev/linux-arm-shellcode?utm_source=hashnode&utm_medium=feed)

Learn how to write and port ARM64 shellcode from Linux

4 min read · [loulu1ou.hashnode.dev](https://loulu1ou.hashnode.dev/linux-arm-shellcode?utm_source=hashnode&utm_medium=feed)

[Jul 14](https://hashnode.com/posts/linux-arm-shellcode/6a563c378858362f6a099900)

### [Automating JavaScript Recon & Vulnerability Triage with DSPy Agents](https://loulu1ou.hashnode.dev/js-recon-triage-with-dspy?utm_source=hashnode&utm_medium=feed)

Build an autonomous AI pentesting agent using DSPy and Python. Automate JavaScript recon, extract endpoints, and hunt for IDOR/BAC vulnerabilities.

5 min read · [loulu1ou.hashnode.dev](https://loulu1ou.hashnode.dev/js-recon-triage-with-dspy?utm_source=hashnode&utm_medium=feed)

[Jul 12](https://hashnode.com/posts/js-recon-triage-with-dspy/6a53ac7b0d59e305f4f1c5ec)