Writing
Research and field notes on offensive security, AI agents, and the tooling behind them.
all writing
Learning is a Passive Skill
Active skills have a cooldown, passive skills don't. Reading and memorizing are active. Learning is the passive, and nobody can sell you the passive.
jul 2026
Oh My Rogue Agent (external)
Agents solving benchmarks take unintended paths, reaching for internal services, mounted secrets, and network pivots. Four case studies of sandbox escapes caught while benchmarking, and the argument that rogue behavior is expected, not unprecedented, and something to design for.
projectdiscovery blog · jul 2026
Benchmarking Neo's Black-Box DAST Capabilities (external)
Neo scores 51/60 (85%) on Argus under a hardened black-box methodology, benchmarking autonomous AI-driven vulnerability discovery.
projectdiscovery blog · apr 2026
Introducing the httpx dashboard (external)
A hosted view over httpx scan output, built on the PDCP dashboard.
projectdiscovery blog · aug 2024
Fuzzing for Unknown Vulnerabilities with Nuclei v3.2 (external)
A walkthrough of v3.2's fuzzing engine, built to surface unknown vulnerability classes rather than known signatures.
projectdiscovery blog · mar 2024
Scanning Login-Protected Targets with Nuclei v3.2 (external)
Using v3.2's authenticated-scanning support to run templates against targets that sit behind a login.
projectdiscovery blog · mar 2024
Nuclei v3.2 Release with Authenticated Scanning, Advanced Fuzzing & more (external)
Authenticated scanning, advanced fuzzing, and ECDSA template signing land in v3.2.
projectdiscovery blog · mar 2024
Introducing Nuclei v3 (external)
A rewrite of Nuclei's execution core: the new Go SDK, the JavaScript scripting engine, and multi-protocol templates.
projectdiscovery blog · oct 2023
How I Got Access to a Company's Auth0 Management API (external)
A leaked Management API token that exposed 300 users' data.
medium · oct 2023
Introducing Alterx: Efficient Active Subdomain Enumeration with Patterns (external)
Why pattern-based subdomain permutation beats a static wordlist, and how Alterx's DSL generates candidates for active enumeration.
projectdiscovery blog · apr 2023
How I Found a Company's Internal S3 Bucket with 41k Files (external)
Three misconfigured S3 buckets on one e-commerce target, one holding 41k files (23.6 GB) including a database backup.
medium · may 2022
Create Your Ultimate Bug Bounty Automation Without Nerdy Bash Skills (external)
Talosplus, the Go recon-automation framework built to replace ad-hoc bash scripts.
medium · may 2022