Python

Turning an Azure App Service into a reverse proxy and payload host to punch a C2 channel through egress filtering.

An OSWE-style source code review of the tudo web app, ending in a single all-in-one exploit script.

Server-side template injection in ERPNext 12 leading to RCE.

A Python staging server plus a C# DInvoke dropper that pulls an RC4-encrypted second stage and lands an undetected session.

Building a ROP chain for Sync Breeze that does not depend on hardcoded addresses, so it survives across Windows versions.