Personal notes on network security, binary analysis, and operating system internals. Writeups stay focused on analysis and defense.
Welcome to Security Notes
Lab notes: dumps, disassembly, sanitized crashes. Network, binary, Android, iOS, OS internals.
TLS Handshake Notes for Defenders
Lab openssl s_client -msg against a loopback nginx: handshake record dump, redacted CN, alert on a bad name — not a MITM cookbook.
ELF Symbols and Relocations, a Full `readelf` Session
Toy PIE: readelf -s / -r / -d / -S in one sitting. .dynsym UND vs .symtab, JUMP_SLOT vs RELATIVE, how a stripped copy still names puts. gdb bind check.
Windows Token Privileges: A Field Checklist
Lab whoami /priv dump, OpenProcess notes on a process we own, integrity vs enabled privileges — no token-steal PoC.
Financial Apps: Concurrency Bugs vs Authorization Flaws
Lab SQLite ledger: UPDATE without a version column vs WITH version, plus an IDOR that is not a race — no money-drain client.
Container Escape Class Lessons (CVE-2022-0185-Era Themes)
Lab capsh –print and docker inspect seccomp/AppArmor, dropped caps, failed mount — no escape exploit.
PostgreSQL Privilege Boundaries and Extension Trust
Lab \du dump, a safe SECURITY DEFINER function, failed GRANT, search_path notes — no superuser exploit.
Tabnabbing, target=_blank, and Related XSS Edges
Lab HTML: target=_blank without rel, opener check in the opened tab, rel=noopener fix, harmless location rewrite — no phishing kit.