corpus.blog
41554 blogs · [ { "id": "01a0d59c-a538-71c3-9eb8-281656364314", "title": "I Missed One TLB Shootdown and Somehow Ended Up Controlling a Page Table", "url": "https://blog.himanshuanand.com/2026/09/i-missed-one-tlb-shootdown/", "published_at": "2026-09-13T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d289948b4", "title": "a fake resume invoked China's defence-tech elite, then installed VShell", "url": "https://blog.himanshuanand.com/2026/08/a-fake-resume-invoked-chinas-defence-tech-elite-then-installed-vshell/", "published_at": "2026-08-27T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d28c1c227", "title": "I had some free time, so I tried to pwn V8", "url": "https://blog.himanshuanand.com/2026/08/i-had-some-free-time-so-i-tried-to-pwn-v8/", "published_at": "2026-08-26T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d292e2e27", "title": "someone is filing your GST return, and it is not your CA", "url": "https://blog.himanshuanand.com/2026/08/someone-is-filing-your-gst-return-and-it-is-not-your-ca/", "published_at": "2026-08-18T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d29c37c56", "title": "The Anti-India Influence Machine: Troll Farms, Fake News, Newsrooms, Algorithms and AI", "url": "https://blog.himanshuanand.com/2026/08/the-anti-india-influence-machine-troll-farms-fake-news-newsrooms-algorithms-and-ai/", "published_at": "2026-08-14T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2ab4af6d", "title": "I found a KVM guest-to-host heap corruption bug and someone else got there first", "url": "https://blog.himanshuanand.com/2026/08/i-found-a-kvm-guest-to-host-heap-corruption-bug-and-someone-else-got-there-first/", "published_at": "2026-08-10T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2b325395", "title": "Two Parsers, One JSON and a Flag: Intigriti's July 2026 Challenge", "url": "https://blog.himanshuanand.com/2026/08/two-parsers-one-json-and-a-flag-intigritis-july-2026-challenge/", "published_at": "2026-08-04T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2c1bdac9", "title": "Reporter 11: 10 people found the WPForms PayPal bug before me (CVE-2026-4986)", "url": "https://blog.himanshuanand.com/2026/07/reporter-11-10-people-found-the-wpforms-paypal-bug-before-me-cve-2026-4986/", "published_at": "2026-07-22T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2ce5521e", "title": "Fine-tune an LLM on Vertex AI, own the whole GCP project", "url": "https://blog.himanshuanand.com/2026/06/fine-tune-an-llm-on-vertex-ai-own-the-whole-gcp-project/", "published_at": "2026-06-16T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2dbe07b1", "title": "Reading a patch tuesday diff for fun: the dhcp client memcpy that copies more than four bytes (CVE-2026-44815)", "url": "https://blog.himanshuanand.com/2026/06/reading-a-patch-tuesday-diff-for-fun-the-dhcp-client-memcpy-that-copies-more-than-four-bytes-cve-2026-44815/", "published_at": "2026-06-11T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2e1f7a79", "title": "Defender playbook for the LLM era", "url": "https://blog.himanshuanand.com/2026/06/defender-playbook-for-the-llm-era/", "published_at": "2026-06-09T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2e794d9a", "title": "30 Minutes from patch to exploit", "url": "https://blog.himanshuanand.com/2026/05/30-minutes-from-patch-to-exploit/", "published_at": "2026-05-27T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2ee2d4a9", "title": "Score by collisions, Patch by panic", "url": "https://blog.himanshuanand.com/2026/05/score-by-collisions-patch-by-panic/", "published_at": "2026-05-19T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2f0d0794", "title": "The 90 day disclosure policy is dead", "url": "https://blog.himanshuanand.com/2026/05/the-90-day-disclosure-policy-is-dead/", "published_at": "2026-05-09T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d2fc9ad30", "title": "I Read OpenSSL for Fun and Found a Nonce Leak", "url": "https://blog.himanshuanand.com/2026/05/i-read-openssl-for-fun-and-found-a-nonce-leak/", "published_at": "2026-05-04T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d309a6725", "title": "how i found a europa.eu compromise (thanks to cricket)", "url": "https://blog.himanshuanand.com/2025/11/how-i-found-a-europa.eu-compromise-thanks-to-cricket/", "published_at": "2025-11-29T00:00:00+00:00" }, { "id": "01a0874a-d72a-73f6-9c8d-252d30a0e6a7", "title": "look mom HR application look mom no job", "url": "https://blog.himanshuanand.com/2025/10/look-mom-hr-application-look-mom-no-job/", "published_at": "2025-10-08T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-39010f031803", "title": "A step by step guide how to hack webhooks", "url": "https://blog.himanshuanand.com/2025/09/a-step-by-step-guide-how-to-hack-webhooks/", "published_at": "2025-09-17T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-39010fcf7b45", "title": "Magecart Skimmer Analysis: From One Tweet to a Campaign", "url": "https://blog.himanshuanand.com/2025/09/magecart-skimmer-analysis-from-one-tweet-to-a-campaign/", "published_at": "2025-09-15T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-390110938f04", "title": "Typosquat Detective : a tiny game to train your eye", "url": "https://blog.himanshuanand.com/2025/09/typosquat-detective-a-tiny-game-to-train-your-eye/", "published_at": "2025-09-10T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-390110abc02b", "title": "Why Relying on LLMs for Code Can Be a Security Nightmare", "url": "https://blog.himanshuanand.com/2025/08/why-relying-on-llms-for-code-can-be-a-security-nightmare/", "published_at": "2025-08-22T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-390111101dce", "title": "Detecting LLM Prompt Injection Without Slowing You Down", "url": "https://blog.himanshuanand.com/2025/08/detecting-llm-prompt-injection-without-slowing-you-down/", "published_at": "2025-08-10T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-3901114750c0", "title": "How I Discovered a Libpng Vulnerability 11 Years After It Was Patched", "url": "https://blog.himanshuanand.com/2025/07/how-i-discovered-a-libpng-vulnerability-11-years-after-it-was-patched/", "published_at": "2025-07-06T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-39011228cf54", "title": "Announcing API for Cloud Intel Atomic Indicators", "url": "https://blog.himanshuanand.com/2023/11/announcing-api-for-cloud-intel-atomic-indicators/", "published_at": "2023-11-29T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-390112359209", "title": "Discover AWSAttacks: A Hub for AWS Threat Intelligence!", "url": "https://blog.himanshuanand.com/2023/11/discover-awsattacks-a-hub-for-aws-threat-intelligence/", "published_at": "2023-11-03T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-3901124af4d0", "title": "Introducing FriendlyIR - Your New Cybersecurity Information Radar on Slack!", "url": "https://blog.himanshuanand.com/2023/07/introducing-friendlyir-your-new-cybersecurity-information-radar-on-slack/", "published_at": "2023-07-12T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-3901130fb91d", "title": "🚀 Introducing Blocked Books: A New Feature on LegallyBlocked", "url": "https://blog.himanshuanand.com/2023/06/introducing-blocked-books-a-new-feature-on-legallyblocked/", "published_at": "2023-06-08T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-390113acb394", "title": "🚀 Introducing Legally Blocked: Your Ultimate Guide to Geo-Blocked Services", "url": "https://blog.himanshuanand.com/2023/05/introducing-legally-blocked-your-ultimate-guide-to-geo-blocked-services/", "published_at": "2023-05-17T00:00:00+00:00" }, { "id": "01a0874a-d72b-706f-8d55-3901149a52f1", "title": "About", "url": "https://blog.himanshuanand.com/about/", "published_at": "2022-11-22T13:10:53+00:00" }, { "id": "01a0874a-d72b-706f-8d55-3901150c8626", "title": "Search", "url": "https://blog.himanshuanand.com/search/", "published_at": null } ] posts Claim your blog
Back to blog.himanshuanand.com
Blog · corpus.blog/blogs/blog.himanshuanand.com/posts

blog.himanshuanand.com

blog.himanshuanand.com

2026

I Missed One TLB Shootdown and Somehow Ended Up Controlling a Page Tableoriginal ↗
13 Sept 2026
a fake resume invoked China's defence-tech elite, then installed VShelloriginal ↗
27 Aug 2026
I had some free time, so I tried to pwn V8original ↗
26 Aug 2026
someone is filing your GST return, and it is not your CAoriginal ↗
18 Aug 2026
The Anti-India Influence Machine: Troll Farms, Fake News, Newsrooms, Algorithms and AIoriginal ↗
14 Aug 2026
I found a KVM guest-to-host heap corruption bug and someone else got there firstoriginal ↗
10 Aug 2026
Two Parsers, One JSON and a Flag: Intigriti's July 2026 Challengeoriginal ↗
4 Aug 2026
Reporter 11: 10 people found the WPForms PayPal bug before me (CVE-2026-4986)original ↗
22 Jul 2026
Fine-tune an LLM on Vertex AI, own the whole GCP projectoriginal ↗
16 Jun 2026
Reading a patch tuesday diff for fun: the dhcp client memcpy that copies more than four bytes (CVE-2026-44815)original ↗
11 Jun 2026
Defender playbook for the LLM eraoriginal ↗
9 Jun 2026
30 Minutes from patch to exploitoriginal ↗
27 May 2026
Score by collisions, Patch by panicoriginal ↗
19 May 2026
The 90 day disclosure policy is deadoriginal ↗
9 May 2026
I Read OpenSSL for Fun and Found a Nonce Leakoriginal ↗
4 May 2026

2025

how i found a europa.eu compromise (thanks to cricket)original ↗
29 Nov 2025
look mom HR application look mom no joboriginal ↗
8 Oct 2025
A step by step guide how to hack webhooksoriginal ↗
17 Sept 2025
Magecart Skimmer Analysis: From One Tweet to a Campaignoriginal ↗
15 Sept 2025
Typosquat Detective : a tiny game to train your eyeoriginal ↗
10 Sept 2025
Why Relying on LLMs for Code Can Be a Security Nightmareoriginal ↗
22 Aug 2025
Detecting LLM Prompt Injection Without Slowing You Downoriginal ↗
10 Aug 2025
How I Discovered a Libpng Vulnerability 11 Years After It Was Patchedoriginal ↗
6 Jul 2025

2023

Announcing API for Cloud Intel Atomic Indicatorsoriginal ↗
29 Nov 2023
Discover AWSAttacks: A Hub for AWS Threat Intelligence!original ↗
3 Nov 2023
Introducing FriendlyIR - Your New Cybersecurity Information Radar on Slack!original ↗
12 Jul 2023
🚀 Introducing Blocked Books: A New Feature on LegallyBlockedoriginal ↗
8 Jun 2023
🚀 Introducing Legally Blocked: Your Ultimate Guide to Geo-Blocked Servicesoriginal ↗
17 May 2023

2022

Aboutoriginal ↗
22 Nov 2022

Undated

Searchoriginal ↗
—