[ NOTES / FIELD LOG ]

Writing &
discoveries.

An evolving archive: stories from the bug hunter journey, techniques, technology, and reflections on faith, family, and purpose.

Archive

4 published entries

php2shell — Pre-Auth RCE in PHP mod_php

Analyzing CVE-2026-109618 and CVE-2026-109619 to achieve remote code execution

Stepping Out From Behind the Curtains

Privacy, identity, and the courage to put my name behind what I build

Iframe Sandbox Trick

Triggering Authentication Dialogs Without allow-popups

Object Injection to SQL Injection

When an unexpected object changes the SQL query