An ongoing & curated collection of awesome software practices and remediation, libraries and frameworks,payloads and techniques, best guidelines and technical resources about Application Security

No description provided.

A security specification on Nuclear Ad Bombs, and why operating systems shouldn't have embedded ads.

CSAF (Common Security Advisory Framework) Perl Toolkit

File descriptor leak vulnerability (CVE pending) in bftpd ≤6.4 daemon mode. Race condition in socket cleanup causes DoS through FD exhaustion. Includes complete analysis, reproduction steps, Docker environment, and patch.

Penetration Tester portfolio. As a Security Researcher, I provided ethical hack disclosures for organizations like NASA and Intel. Expert in web security, vulnerability research, and helping businesses fix website flaws. Focused on professional-grade penetration testing.

This project uses Cisco Secure APIs to automate the monitoring and troubleshooting of Secure Access Service Edge (SASE) deployments. It retrieves real-time network performance and security data, and uses this data to provide customers with visibility into their network, create custom dashboards and alerts and troubleshoot issues.

Security vulnerabilities discovered and responsibly disclosed (2004-2006). Includes 2 CVEs, Microsoft MSRC acknowledgment, and published advisories.

PDF export of the security advisories related to CVE for vulnerabilities that I had identified.