ssrf poc xspa iam aws ai-agents bashware bugbounty claude-code cloud-security csrf process explorer security-credentials shell-scripting walkthrough windows writeup xss adobe agentic-coding amazon-q ambient-computing anthropic aws-bedrock aws-cli awsjail bastion bedrock-agents browser fuzzing c0c0n calendar cloudtrail confused-copilot convertsidtostringsid copilot ctf cybe-ai-summit deepseek deepseek-v4 excessive-agency exploitation facebook gemini generative-ai gettokeninformation glm-5.2 gmail google-vrp hooks html indirect-prompt-injection iot kimi kimi-k3 least-privilege mcp metasploit moonshot mssql mutation xss mute mysql ollama omniture openprocess openprocesstoken oracle owasp-top-10-llm pdf pentest postgresql privilege-confusion process monitor prompt-injection python rce reconnaissance scripting security-review sendmessage shell shells smart-home sqli ssh sts system-prompt tag-injection tool-capabilities tools tuya uac username enumeration vulncon vulnerability-disclosure webshell websocket windows registry wordpress xwh yahoo
Author's picture

Riyaz Walikar

Build, Break, Repeat
Independent Security Researcher