SSangharsha·Aug 24Deceptive AI Doesn’t Break the Rules. It Optimizes Around Them: with game theorylearning game theory part 03 min read·noob6t5.hashnode.dev
SSangharsha·Aug 23Game Theory for AI Security Part 1Defender Strategies The defender chooses a security policy \(D \in \mathcal{D}\) where: $$\mathcal{D} = \{\text{baseline}, \text{hardened}, \text{monitoring}\}$$ Attacker Strategies The attacker choos3 min read·noob6t5.hashnode.dev
SSangharsha·Aug 22 Insecure Firestore Security Rules & PII ExposureAfter poking with firebase R/W Realtime Database (Unauthenticated): https://[REDACTED].firebaseio.com/.json (Access Denied) Storage Bucket (Unauthenticated): https://firebasestorage.googleapis.com/v3 min read·noob6t5.hashnode.dev1
SSangharsha·Aug 16Payment Bypass Flaw in TechPSC HUBPayment bypass leads to full feature unlock ,bypass Link: https://techpsc.com/halloffame How This app work\s : sets 1 through 3 open freely, but selecting set 4 triggers a subscription payment prompt.2 min read·noob6t5.hashnode.dev
SSangharsha·Jun 27`ls` That Saved Me From Deleting Weeks of Work (AGAIN)IMP Note: `ls -d regex`1 min read·noob6t5.hashnode.dev
SSangharsha·Jun 11Pickle Deserialization RCE via Model Upload EndpointLink: https://www.ratctf.com/challenges/synapse-lab This challenge revolves around a classic but still heavily abused primitive: unsafe Python pickle deserialization exposed through a model upload API4 min read·noob6t5.hashnode.dev
SSangharsha·May 12Beyond the Canvas: Exploiting an Unsanitized Side-Channel in draw.io CVE-2026-46642 : Imagine opening a .drawio file and having your entire design silently exfiltrated to a remote server—all by a simple drag-and-drop.3 min read·noob6t5.hashnode.dev
SSangharsha·Apr 14 How OPT(ADD).Mathematics Builds the Foundation for AI/ML WorldBased on the course and curriculum of NEB7 min read·noob6t5.hashnode.dev1
SSangharsha·Apr 12Deceptive AI Doesn’t Break the Rules. It Optimizes Around Them.Finding while researching on AI Deception3 min read·noob6t5.hashnode.dev
SSangharsha·Jan 3(QLotto) – HTB CTF WriteupPredict hidden lotto numbers in QLotto CTF using negative indexing and gate manipulation. Achieve anti-correlation for predictable outcomes3 min read·noob6t5.hashnode.dev
