Blog
Red-Teaming AI Agents on a $0 Budget: What I Learned Breaking Into a Banking Assistant
I built an automated red-teaming pipeline to attack a vulnerable AI banking agent with 11 adversarial techniques on a consumer Mac Mini. Here is what I learned.
Automating CTF writeups with StealthWriter and SKILL.md
How to use SKILL.md as a smart bridge between AI agents and CLI tools like StealthWriter for reliable, automated CTF writeups.
AI and CTFs are not friends BUT...
Introducing StealthWriter: From Raw Notes to Polished CTF Writeups
LLMborghini: Calendar Bot Data Leak via Prompt Injection
Exploited an LLM-powered calendar bot to leak confidential sales data by manipulating event descriptions.
[THM] Juicy writeup
Exploiting an LLM chatbot with prompt injection and XSS to leak system prompts, internal flags, and credentials.
[mntcrl26] NFZ - SD Card Forensics: Uncovering Hidden Thumbnails
A CTF forensics writeup on analyzing an exFAT SD card image from a DJI drone, recovering deleted JPEGs, and extracting hidden thumbnails to find the flag.
Kaboom: TryHackMe - Industrial Intrusion - Task 8
A TryHackMe Industrial Intrusion writeup on exploiting Modbus TCP on OpenPLC, triggering a simulated water pump overpressurization, and gaining a reverse shell.