Archives
All the articles I've archived.
- llm-security 26 min read
I Built the Defense, Then Attacked It: Numbers From a Secure Triage Agent
A capability-tracking interpreter for a SOC triage agent, a 20-case injection suite aimed at it, and 420 runs across three models. Exfiltration and disclosure go to zero and stay there regardless of model strength. Evasion tracks model capability, and one of my four policies turned out to be pure friction. Includes the LangGraph port, and why the framework's flagship agent pattern breaks the design.
Read article - llm-security 18 min read
Building an Agent That Can't Be Hijacked: The Design Rules
Eight frameworks tell you how to secure an agentic system and none of them are substitutes for each other. What they agree on, where they actively contradict each other, and the four properties I'm going to enforce in code in Part 2.
Read article
- langchain 3 min read
Building LangChain Tools and Agents: From Zero to SOAR Assistant
Learn how to create LangChain tools from scratch and build a simple SOAR (Security Orchestration, Automation and Response) agent. This hands-on tutorial covers the fundamentals of tool development and agent creation for security automation.
Read article - rag 5 min read
Building a RAG System for Cybersecurity Compliance: A Simple POC with LangChain v1+
A step-by-step walkthrough of building a basic RAG system with LangChain v1+ to query compliance regulations. This is an unoptimized POC for learning purposes, not production-ready.
Read article
- ml-cyber 20 min read
Engineering Security ML with Elastic – Part 3: Benchmarking Unsupervised Models
How to Compare Anomaly Detection Models Without Labels
Read article - langgraph 5 min read
LangGraph Agent Architectures and Patterns: A Professional Guide
A comprehensive theoretical guide on agent architectures and patterns used professionally in AI projects. From simple workflows to hierarchical multi-agent systems, with real-world use cases for each pattern.
Read article
- elasticsearch 11 min read
Engineering Security ML with Elastic – Part 1: From Logs to Features
From Windows Event Logs to Behavioral Features: Preparing Elasticsearch Data for Anomaly Detection
Read article - typescript 3 min read
TypeScript for Pythonistas: A Guide to Building Red Team Tools
A comprehensive TypeScript guide for Python developers. Learn the fundamentals by comparing Python and TypeScript code, focused on offensive security tool development and MCP servers.
Read article
- web 2 min read
Web Exploitation Cheatsheet
SQLi, RCE, LFI/RFI, File Uploads, Deserialization, SSTI, Auth bypass and manual exploitation for HTB, CTFs and real-world pentests
Read article - windows 2 min read
Windows Privilege Escalation Cheatsheet
Fast techniques, tools, and commands for HTB, CTFs and OSCP-like environments
Read article
- smb 2 min read
SMB & RPC Enumeration Cheatsheet
Fast SMB, RPC and Windows service enumeration for HTB, CTFs and real-world AD pentests
Read article - web 2 min read
Web Attack Surface & Enumeration Cheatsheet
Discovery, fingerprinting, content discovery, parameter fuzzing, virtual hosts and technology mapping for HTB, CTFs and real-world pentests
Read article
- active-directory 2 min read
Active Directory PrivEsc Cheatsheet
ACL abuses, delegations, AD CS, RBCD, Shadow Credentials, and domain privilege escalation paths
Read article - adversarial-ml 14 min read
Adversarial Machine Learning: Attacks and Defenses
Deep dive into adversarial attacks against ML models: evasion, poisoning, and extraction. Exploring defenses, red teaming strategies, and the MITRE ATLAS framework for securing AI systems.
Read article