Reconnaissance & Enumeration
Learning how to map authorized lab targets, identify exposed services, and organize findings.
~/writeups — SECURITY RESEARCH
Technical Writeups
Practical notes from security labs, controlled testing environments, CTF challenges, and independent research.
The goal is to document the process—not just the result—including the reasoning, evidence, and lessons learned.
Topics
Web Application Security
Exploring common web vulnerabilities, testing methodology, impact assessment, and remediation.
Linux & Privilege Boundaries
Studying permissions, service configurations, system hardening, and privilege-escalation concepts in authorized labs.
CTFs & Practice Labs
Structured challenge notes covering methodology, discoveries, and takeaways from practice environments.
Published writeups
Aftermarket Android Head Unit Security Audit
A personal device audit of a Eonon aftermarket Android car stereo (Topway TS18 platform), run like a mini pentest engagement — recon → static analysis → sandboxed dynamic verifi...
Documentation principles
- Test only systems I own or have explicit authorization to assess.
- Explain methodology and findings clearly.
- Include defensive recommendations where relevant.
- Avoid publishing sensitive information or unnecessary details that could enable attacks against real systems.