corpus.blog
56,966 blogs · [ { "id": "01a087df-ea27-7235-be22-6c4f15064ad9", "title": "Code Pathfinder now speaks Go", "url": "http://shivasurya.me/2026/04/18/announcing-golang-support-code-pathfinder/", "published_at": "2026-04-18T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f15b1429b", "title": "Same Bug, Different Endpoint: Finding Path Traversal in Langflow with Code Pathfinder", "url": "http://shivasurya.me/2026/04/15/langflow-knowledge-bases-path-traversal-variant-analysis/", "published_at": "2026-04-15T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f15bb8780", "title": "CVE-2026-33186: Bypassing gRPC-Go Authorization with a Missing Slash", "url": "http://shivasurya.me/2026/04/01/cve-2026-33186-grpc-go-authorization-bypass/", "published_at": "2026-04-01T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f16b9b138", "title": "2025 Wrapped", "url": "http://shivasurya.me/2025/12/20/2025-wrapped/", "published_at": "2025-12-20T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f17436911", "title": "Some thoughts around Django SQL Injection CVE-2025-64459", "url": "http://shivasurya.me/2025/11/07/django-sql-injection-CVE-2025-64459/", "published_at": "2025-11-07T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f17702026", "title": "Claude Code for Security Analysis: Introducing SecureFlow CLI to Hunt Security Vulnerabilities", "url": "http://shivasurya.me/2025/10/03/introducing-secureflow-cli-to-hunt-vulnerabilities-claude-code-for-security-analysis/", "published_at": "2025-10-03T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f17f97448", "title": "Exploring fun parts of Neural Network", "url": "http://shivasurya.me/2025/08/08/neural-network/", "published_at": "2025-08-08T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1817c017", "title": "Rethinking MCP or Tool Calling Through Permission Based System", "url": "http://shivasurya.me/2025/07/19/mcp-permission-system/", "published_at": "2025-07-19T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f190e4ea3", "title": "Static Analysis Isn't Enough: Understanding Library Interactions for Effective Data Flow Tracking", "url": "http://shivasurya.me/2025/04/17/static-analysis-isnt-enough-understanding-library-interactions-for-effective-data-flow-tracking/", "published_at": "2025-04-17T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f19bf0de8", "title": "Lessons from Building Sherlock: Automating Security Code Reviews with Sourcegraph", "url": "http://shivasurya.me/2025/04/10/lessons-from-building-sherlock-automating-security-code-reviews-with-sourcegraph/", "published_at": "2025-04-10T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1a9195ae", "title": "LLM-Powered Security Reviews: Insights and Challenges", "url": "http://shivasurya.me/2025/03/19/llm-powered-security-reviews/", "published_at": "2025-03-19T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1b1b9b1e", "title": "How I Use AI to Streamline/Assist My Work", "url": "http://shivasurya.me/2025/01/28/how-i-use-llm-workflows/", "published_at": "2025-01-28T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1bc0738e", "title": "2024 Wrapped", "url": "http://shivasurya.me/2024/12/26/2024-wrapped/", "published_at": "2024-12-26T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1c41a775", "title": "Books I read in 2024", "url": "http://shivasurya.me/2024/12/19/books-i-read-2024/", "published_at": "2024-12-19T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1d01895e", "title": "CodeQL: Eindhoven Quantifier Notation", "url": "http://shivasurya.me/2024/09/10/codeql-eindhoven-quantifier-notation/", "published_at": "2024-09-10T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1dab4749", "title": "Sherlock: Automate security code reviews with Cody AI", "url": "http://shivasurya.me/2024/06/27/automate-security-code-reviews-with-cody-ai/", "published_at": "2024-06-27T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1ea18b81", "title": "Defining Boundaries & Sinks for Inter-procedural Source Sink Analysis - Part 3", "url": "http://shivasurya.me/2024/03/08/building-inter-procedural-source-sink-analysis-from-scratch-part-3/", "published_at": "2024-03-08T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1effda4a", "title": "Deep dive on Android Java / Kotlin Deserialization Code Execution with Semgrep Detection", "url": "http://shivasurya.me/2024/01/24/java-deserialization-rce-android-application-layer/", "published_at": "2024-01-24T00:00:00+00:00" }, { "id": "01a087df-ea27-7235-be22-6c4f1f6dfed6", "title": "2023 Wrap - Year in Review", "url": "http://shivasurya.me/2023/12/27/2023-wrap/", "published_at": "2023-12-27T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af374910fd", "title": "Building Inter-procedural Source Sink Analysis from Scratch - Part 2", "url": "http://shivasurya.me/2023/09/01/building-inter-procedural-source-sink-analysis-from-scratch-part-2/", "published_at": "2023-09-01T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3835c0a4", "title": "Building A Simple Source-Sink Analysis in Java from Scratch - Part 1", "url": "http://shivasurya.me/2023/08/27/building-simple-source-sink-analysis-from-scratch-part-1/", "published_at": "2023-08-27T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3923b389", "title": "From ArcGIS to Mapbox: How Cody AI Made My Web App Shine", "url": "http://shivasurya.me/2023/07/02/sourcegraph-cody/", "published_at": "2023-07-02T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3952c9ed", "title": "Building A Simple OpenAI Powered Personal Assistant", "url": "http://shivasurya.me/2023/05/19/building-first-openai-powered-personal-assistant-app/", "published_at": "2023-05-19T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af39e507aa", "title": "Heap Two Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/05/06/exploit-education-heap-two-exercise-writeup/", "published_at": "2023-05-06T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3a5286a5", "title": "Heap One Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/05/05/exploit-education-heap-one-exercise-writeup/", "published_at": "2023-05-05T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3accd9aa", "title": "Heap Zero Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/04/28/exploit-education-format-heap-exercise-writeup/", "published_at": "2023-04-28T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3b864414", "title": "Format Four Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/04/21/exploit-education-format-four-exercise-writeup/", "published_at": "2023-04-21T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3c337e85", "title": "Format Three Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/04/14/exploit-education-format-three-exercise-writeup/", "published_at": "2023-04-14T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3c416918", "title": "Format Two Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/04/07/exploit-education-format-two-exercise-writeup/", "published_at": "2023-04-07T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3c77c2fd", "title": "Format One Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/03/31/exploit-education-format-one-exercise-writeup/", "published_at": "2023-03-31T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3d3a925b", "title": "CVE-2023-23397 - Zero Click Net-NTLMv2 Credential Hash Leak on Outlook Client", "url": "http://shivasurya.me/2023/03/25/CVE-2023-23397-vulnerability-deep-dive-and-poc/", "published_at": "2023-03-25T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3d797dc3", "title": "HackTheBox Active Writeup - Active Directory - OSCP Practice", "url": "http://shivasurya.me/2023/03/17/hackthebox-active-writeup-oscp-active-directory/", "published_at": "2023-03-17T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3db3e24c", "title": "Format Zero Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/03/10/exploit-education-format-zero-exercise-writeup/", "published_at": "2023-03-10T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3e1fb708", "title": "Stack Six Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/02/26/exploit-education-stack-six-exercise-writeup/", "published_at": "2023-02-26T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3ea06a56", "title": "HackTheBox Jerry Writeup - OSCP Practice", "url": "http://shivasurya.me/2023/02/24/hackthebox-jerry-writeup-oscp/", "published_at": "2023-02-24T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3f449258", "title": "HackTheBox OSCP Writeups - Shivasurya.me", "url": "http://shivasurya.me/2023/02/20/hackthebox-oscp-writeups/", "published_at": "2023-02-20T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3f9e8de1", "title": "HackTheBox Bashed Writeup - OSCP Practice List", "url": "http://shivasurya.me/2023/02/14/hackthebox-bashed-writeup-oscp/", "published_at": "2023-02-14T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af3ff0124c", "title": "Detecting Android WebView Vulnerable Configurations with Semgrep Rules - Part 1", "url": "http://shivasurya.me/2023/02/10/android-webview-vulnerabilities-semgrep-rules-detection/", "published_at": "2023-02-10T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af40e3eacc", "title": "Stack Five Writeup (Code Execution) - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/02/04/exploit-education-stack-five-exercise-writeup/", "published_at": "2023-02-04T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af41b273c7", "title": "Stack Four Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/01/28/exploit-education-stack-four-exercise-writeup/", "published_at": "2023-01-28T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af422d1e4c", "title": "Stack Three Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/01/27/exploit-education-stack-three-exercise-writeup/", "published_at": "2023-01-27T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af42700f6f", "title": "Stack Two Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/01/26/exploit-education-stack-two-exercise-writeup/", "published_at": "2023-01-26T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af42e69f16", "title": "Stack One Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/01/20/exploit-education-stack-one-exercise-writeup/", "published_at": "2023-01-20T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af43109e1a", "title": "Stack Zero Writeup - Exploit Education Lab Exercise", "url": "http://shivasurya.me/2023/01/12/exploit-education-stack-zero-exercise-writeup/", "published_at": "2023-01-12T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af439978ae", "title": "Exploit Education Lab Setup - Windows & MacOS", "url": "http://shivasurya.me/2023/01/06/exploit-education-lab-setup/", "published_at": "2023-01-06T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af43a7af08", "title": "Binary Search and Hidden Overflow 🪲", "url": "http://shivasurya.me/2022/12/04/binary-search-overflow/", "published_at": "2022-12-04T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af44951654", "title": "Detecting Android Content Provider APIs with Semgrep Rules", "url": "http://shivasurya.me/2022/11/28/android-content-provider-semgrep-detection/", "published_at": "2022-11-28T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af44a9cbd7", "title": "Cross-Site Scripting attack on Leetcode", "url": "http://shivasurya.me/2020/12/07/leetcode-xss/", "published_at": "2020-12-07T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af456ba7f7", "title": "Securing an ExpressJS server - Part 1", "url": "http://shivasurya.me/2020/11/05/securing-express-server-part-1/", "published_at": "2020-11-05T00:00:00+00:00" }, { "id": "01a087df-ea28-716f-ad0f-09af458e8a3b", "title": "About", "url": "http://shivasurya.me/about/", "published_at": null }, { "id": "01a087df-ea28-716f-ad0f-09af46093f6a", "title": "Books", "url": "http://shivasurya.me/books/", "published_at": null }, { "id": "01a087df-ea28-716f-ad0f-09af462dc50d", "title": "LLMs Full Content", "url": "http://shivasurya.me/llms-full.txt", "published_at": null }, { "id": "01a087df-ea28-716f-ad0f-09af470bec6d", "title": "Projects", "url": "http://shivasurya.me/projects/", "published_at": null }, { "id": "01a087df-ea28-716f-ad0f-09af4782b8a7", "title": "Research", "url": "http://shivasurya.me/research/", "published_at": null }, { "id": "01a087df-ea28-716f-ad0f-09af47f04f06", "title": "Talks", "url": "http://shivasurya.me/talks/", "published_at": null } ] posts Claim your blog
Back to shivasurya.me
Blog · corpus.blog/blogs/shivasurya.me/posts

shivasurya.me

shivasurya.me

2026

Code Pathfinder now speaks Gooriginal ↗
18 Apr 2026
Same Bug, Different Endpoint: Finding Path Traversal in Langflow with Code Pathfinderoriginal ↗
15 Apr 2026
CVE-2026-33186: Bypassing gRPC-Go Authorization with a Missing Slashoriginal ↗
1 Apr 2026

2025

2025 Wrappedoriginal ↗
20 Dec 2025
Some thoughts around Django SQL Injection CVE-2025-64459original ↗
7 Nov 2025
Claude Code for Security Analysis: Introducing SecureFlow CLI to Hunt Security Vulnerabilitiesoriginal ↗
3 Oct 2025
Exploring fun parts of Neural Networkoriginal ↗
8 Aug 2025
Rethinking MCP or Tool Calling Through Permission Based Systemoriginal ↗
19 Jul 2025
Static Analysis Isn't Enough: Understanding Library Interactions for Effective Data Flow Trackingoriginal ↗
17 Apr 2025
Lessons from Building Sherlock: Automating Security Code Reviews with Sourcegraphoriginal ↗
10 Apr 2025
LLM-Powered Security Reviews: Insights and Challengesoriginal ↗
19 Mar 2025
How I Use AI to Streamline/Assist My Workoriginal ↗
28 Jan 2025

2024

2024 Wrappedoriginal ↗
26 Dec 2024
Books I read in 2024original ↗
19 Dec 2024
CodeQL: Eindhoven Quantifier Notationoriginal ↗
10 Sept 2024
Sherlock: Automate security code reviews with Cody AIoriginal ↗
27 Jun 2024
Defining Boundaries & Sinks for Inter-procedural Source Sink Analysis - Part 3original ↗
8 Mar 2024
Deep dive on Android Java / Kotlin Deserialization Code Execution with Semgrep Detectionoriginal ↗
24 Jan 2024

2023

2023 Wrap - Year in Revieworiginal ↗
27 Dec 2023
Building Inter-procedural Source Sink Analysis from Scratch - Part 2original ↗
1 Sept 2023
Building A Simple Source-Sink Analysis in Java from Scratch - Part 1original ↗
27 Aug 2023
From ArcGIS to Mapbox: How Cody AI Made My Web App Shineoriginal ↗
2 Jul 2023
Building A Simple OpenAI Powered Personal Assistantoriginal ↗
19 May 2023
Heap Two Writeup - Exploit Education Lab Exerciseoriginal ↗
6 May 2023
Heap One Writeup - Exploit Education Lab Exerciseoriginal ↗
5 May 2023
Heap Zero Writeup - Exploit Education Lab Exerciseoriginal ↗
28 Apr 2023
Format Four Writeup - Exploit Education Lab Exerciseoriginal ↗
21 Apr 2023
Format Three Writeup - Exploit Education Lab Exerciseoriginal ↗
14 Apr 2023
Format Two Writeup - Exploit Education Lab Exerciseoriginal ↗
7 Apr 2023
Format One Writeup - Exploit Education Lab Exerciseoriginal ↗
31 Mar 2023
CVE-2023-23397 - Zero Click Net-NTLMv2 Credential Hash Leak on Outlook Clientoriginal ↗
25 Mar 2023
HackTheBox Active Writeup - Active Directory - OSCP Practiceoriginal ↗
17 Mar 2023
Format Zero Writeup - Exploit Education Lab Exerciseoriginal ↗
10 Mar 2023
Stack Six Writeup - Exploit Education Lab Exerciseoriginal ↗
26 Feb 2023
HackTheBox Jerry Writeup - OSCP Practiceoriginal ↗
24 Feb 2023
HackTheBox OSCP Writeups - Shivasurya.meoriginal ↗
20 Feb 2023
HackTheBox Bashed Writeup - OSCP Practice Listoriginal ↗
14 Feb 2023
Detecting Android WebView Vulnerable Configurations with Semgrep Rules - Part 1original ↗
10 Feb 2023
Stack Five Writeup (Code Execution) - Exploit Education Lab Exerciseoriginal ↗
4 Feb 2023
Stack Four Writeup - Exploit Education Lab Exerciseoriginal ↗
28 Jan 2023
Stack Three Writeup - Exploit Education Lab Exerciseoriginal ↗
27 Jan 2023
Stack Two Writeup - Exploit Education Lab Exerciseoriginal ↗
26 Jan 2023
Stack One Writeup - Exploit Education Lab Exerciseoriginal ↗
20 Jan 2023
Stack Zero Writeup - Exploit Education Lab Exerciseoriginal ↗
12 Jan 2023
Exploit Education Lab Setup - Windows & MacOSoriginal ↗
6 Jan 2023

2022

Binary Search and Hidden Overflow 🪲original ↗
4 Dec 2022
Detecting Android Content Provider APIs with Semgrep Rulesoriginal ↗
28 Nov 2022

2020

Cross-Site Scripting attack on Leetcodeoriginal ↗
7 Dec 2020
Securing an ExpressJS server - Part 1original ↗
5 Nov 2020

Undated

Aboutoriginal ↗
—
Booksoriginal ↗
—
LLMs Full Contentoriginal ↗
—
Projectsoriginal ↗
—
Researchoriginal ↗
—
Talksoriginal ↗
—