One WebSocket, one Shell: CVE-2026-39987 ExplainedHow a missing auth check on Marimo's terminal endpoint gives you an interactive shell, and what it took to build a decent client for itAug 14, 2026·10 min read
Malicious IPs and Domain ReconnaissanceExternal Attack Surface Recon with CensysJun 10, 2026·2 min read
Hack the Box - Season 10 - Season of the UndergroundSeason 10 - Season of the Underground This was a rough season. Moved to a new property towards the end of the season which dropped me in the rankings. Surprised that I bumped back up with just one boxMay 31, 2026·4 min read
