Security Research,
Engineered to Depth.

RAG Security: How Retrieval-Augmented Generation Can Leak Your Private Data

RAG pipelines leak data in four ways: over-permissioned retrieval, indirect prompt injection, poisoned documents, and sensitive data in the index. How each works and how to fix it.

How to Find Publicly Accessible S3 Buckets in Your AWS Account

Find publicly accessible S3 buckets with the AWS CLI. Check policy status, ACLs, and Block Public Access in one loop, then lock the account down safely.

How to Check Which Users Have Sudo Access on a Linux Host

Find every user with sudo access on a Linux host: check sudo groups, read sudoers and sudoers.d, list effective privileges per user, and flag the risky rules.

How to Find World-Writable Files in Linux

Find world-writable files and directories in Linux with find, work out which ones are a privilege-escalation risk, and fix them without breaking anything.