CTF walkthroughs, malware analysis, penetration testing, and security research by Animesh Roy.
Dead Drop: SQLi, require() RCE, and AddSelf to Domain Admin
Disgruntled: Linux Forensics of an Insider Logic Bomb
Silent Monitor: SQLi, Command Injection, KeePass to Root
Domino: IDOR to Forged JWT to RCE to Root
Re-Testing: Verify Fixes, Catch Patches
Writing Pentest Reports: Structure and QA
Planning and Scoping: Scope, RoE, Compliance
Threat Modeling for Pentesters: STRIDE to ATT&CK
Python Pentesting Scripts: Recon Toolkit
