Skip to content

live

writing

Writing.

Books, research papers, vulnerability analysis, technical references, threat reports, and commentary. Published at snailsploit.com, Hakin9 Magazine, and Medium.

all41 books1 research papers15 vulnerability research8 technical references11 threat reports3 commentary3

Books

1 entry

Long-form published volumes.

Adversarial Minds

Offensive psychology, social engineering, and adversarial reasoning. The human-layer companion to AATMF and SEF. ISBN 978-965-598-977-9.

Research papers

15 entries

Original research — novel techniques, original measurement, first-disclosure analysis.

The Insight–Agency Gap

Eight proposed failure modes in LLM reasoning and behavior, with evidence limits and a replication framework.

research papers

Attacking the Parser #0: Serialization as Subversion

Parser-state desynchronization via structured output wrappers — same payload, different decoder. A behavioral primitive on the surface between conversation and schema, and where it lands in MCP/agent pipelines.

research papers

Semantic-to-Metadata Smuggling in Multi-LoRA Routing Gateways

The vLLM Semantic Router and equivalent gateways select LoRA adapters from prompt content. The routing decision is the unreviewed trust boundary: signal suppres

research papers

Indirect Injection Was Never Blind

Indirect prompt injection (OWASP LLM01) is presumed blind. On the SSE stream the attacker reads their injected payload turn into a tool_use call with arguments,

research papers

Self-Replicating Memory Worm

research papers

Memory Injection Through Nested Skills

research papers

The 30% Blind Spot: Why LLM Safety Judges Fail

research papers

AI Breach Detection Gap

research papers

AI Coding Agent Attack Surface

research papers

Computational Countertransference

research papers

AI Gateway Threat Model: 8 Attack Vectors

research papers

Agentic AI Threat Landscape

research papers

RAG, Agentic AI, and the New Attack Surface

research papers

AI-Powered Obfuscator Bypasses Detection in…

research papers

The Structural Vulnerabilities of Large…

research papers

Vulnerability research

8 entries

Vulnerability research and CVE writeups.

Linux Kernel io_uring/zcrx

vulnerability research

Zero-Trust Container Runtime Attestation

vulnerability research

Advanced Container Escapes: Security Deep Dive

vulnerability research

RCE & DNS Exfiltration in ChatGPT Canvas

vulnerability research

Evading Endpoint Detection and Response (EDR)

vulnerability research

Context Inheritance Exploit

vulnerability research

Exploiting Cloud Vulnerabilities

vulnerability research

ChatGPT Jailbreak via Context Manipulation

vulnerability research

Technical references

11 entries

Technical reference pages — taxonomies, comparisons, hardening guides.

Atomicity as a Security Control

Atomicity is a security control, not just a database feature. Where partial transactions become exploitable, and where in the SSDLC to catch them. By Avraham Shemesh.

technical references

Adversarial Prompting

technical references

LLM Jailbreak Techniques: A Technical Taxonomy

technical references

Prompt Injection Examples

technical references

MCP vs A2A Attack Surface

technical references

AATMF v3.1 vs MITRE ATLAS

technical references

LLM Red Teamer's Playbook

technical references

Memory Manipulation: AI Context Poisoning

technical references

MCP Security Hardening

technical references

MCP Threat Analysis

technical references

Custom Instruction Backdoor

technical references

Threat reports

3 entries

Industry threat analyses with citations and figures.

Weaponized AI Supply Chain

AI Social Engineering

Your Personal Data Is for Sale

Commentary

3 entries

Opinion and analysis from an offensive perspective.

Is AI Inherently Vulnerable? An Offensive…

Embracing AI: Adapt or Die in Cybersecurity

Hidden Risks of AI