@noob6t5

Pickle Deserialization RCE via Model Upload Endpoint

5d ago · 4 min read · Link: https://www.ratctf.com/challenges/synapse-lab This challenge revolves around a classic but still heavily abused primitive: unsafe Python pickle deserialization exposed through a model upload API

Beyond the Canvas: Exploiting an Unsanitized Side-Channel in draw.io

May 12 · 3 min read · I don't usually write about my web findings, but I felt this one needed to be documented as a reminder for my future self too. My initial mistake was tunnel-visioning on a direct bypass of the main sa

How OPT(ADD).Mathematics Builds the Foundation for AI/ML World

Apr 14 · 7 min read · In this article, I have tried to connect each chapter with insights from teaching and real-world experience in building and analyzing AI systems, showing how these concepts power modern technology and

Deceptive AI Doesn’t Break the Rules. It Optimizes Around Them.

Apr 12 · 3 min read · Everyone assumes deception in AI will look obvious. A glitch. A spike. A detectable anomaly. That assumption is wrong. The most effective deception doesn’t violate the system.It stays statistically i

(QLotto) – HTB CTF Writeup

Jan 3 · 3 min read · Goal: Predict the hidden “lotto numbers” (qubit 0) based on visible “testing numbers” (qubit 1) and bypass server restrictions. I was messing with mirroring and advanced math but but lmao it was just Anti-correlation and Bitslmao Recon Phase I start...