Tag feed

Beyond the Canvas: Exploiting an Unsanitized Side-Channel in draw.io

2d ago · 3 min read · I don't usually write about my web findings, but I felt this one needed to be documented as a reminder for my future self too. My initial mistake was tunnel-visioning on a direct bypass of the main sa

How OPT(ADD).Mathematics Builds the Foundation for AI/ML World

Apr 14 · 7 min read · In this article, I have tried to connect each chapter with insights from teaching and real-world experience in building and analyzing AI systems, showing how these concepts power modern technology and

Deceptive AI Doesn’t Break the Rules. It Optimizes Around Them.

Apr 12 · 3 min read · Everyone assumes deception in AI will look obvious. A glitch. A spike. A detectable anomaly. That assumption is wrong. The most effective deception doesn’t violate the system.It stays statistically i

(QLotto) – HTB CTF Writeup

Jan 3 · 3 min read · Goal: Predict the hidden “lotto numbers” (qubit 0) based on visible “testing numbers” (qubit 1) and bypass server restrictions. I was messing with mirroring and advanced math but but lmao it was just Anti-correlation and Bitslmao Recon Phase I start...

HTB: AI Space

Nov 15, 2025 · 2 min read · we gotta know the file first. file distance_matrix.npy distance_matrix.npy: NumPy array, version 1.0, header length 118 Step 1 — Identify Instead of blindly plotting heatmaps, I interrogated the matrix: import numpy as np D = np.load("distance_matr...

Vector in Move smart contract Part 2

Nov 6, 2025 · 5 min read · All the push/pops, borrows, and folds mean jack until they do something on-chain. So here’s a concrete case: w’re designing a small token distributor, like a mini airdrop system. w’ve got a bunch of users and an amount to push to each.No fancy struct...

Vectors in Move Smart Contract : Part 1

Nov 4, 2025 · 5 min read · Below is a fine refined blog for which i used AI to make it as more clean & efficient as possible. In Move, a vector is like your all-purpose data stash — dynamic, flexible, and as close to an array as the language allows.But unlike loose languages, ...

pwnable: [fd]

Jun 30, 2025 · 1 min read · Source Code: #include <stdio.h> #include <stdlib.h> #include <string.h> char buf[32]; int main(int argc, char* argv[], char* envp[]){ if(argc<2){ printf("pass argv[1] a number\n"); return 0; } int fd = atoi( argv[1] ) - 0x...

pwnable: Collision

Jun 30, 2025 · 2 min read · Desc: Daddy told me about cool MD5 hash collision today. I wanna do something like that too! Source Code: #include <stdio.h> #include <string.h> unsigned long hashcode = 0x21DD09EC; unsigned long check_password(const char* p){ int* ip = (int*)p; ...

CheckSec Enabled VS Disabled

Jun 28, 2025 · 2 min read · 🔐 ProtectionEnabled ✅Disabled ❌Impact for Hackers/RE RELROFull RELRO → GOT is read-only after startup. No GOT overwrite. Partial RELRO → GOT is writable until after relocations.No RELRO → GOT stays writable. You can overwrite GOT entries for func...