~/mzfr

After seeing the tweet from @Fried_rice and reading about the source leak of claude code I got curious.

In this post, I look back on all the stuff I did in 2025

An Android deeplink validation bypass that allowed loading arbitrary domains in the app’s WebView through regex pattern mismatches.

In this post, I look back on all the stuff that I did in 2024

How I went from never running to completing a marathon in less than a year

In this post, I look back on all the stuff that I did in 2023

Took these course in the first semester of my masters

Got accepted at NUS, started Mcomp, and life at Singapore

Generating PDF from HTML containing pie charts from chartjs

In this post, I look back on all the stuff that I did in 2022

Using VS Code, syncthing, and obsidian mobile together for taking notes.

I’ve been lurking around r/selfhosted for quite a while now, and decided to use old raspi to host some simple applications.

Decided to shift from Ubuntu to Arch WSL and found an amazing way to run systemd.

Looking back to all the 2021 stuff that I did

A few months ago one of my friends asked me to help him mint some NFT on the Cardano blockchain.

In the previous post I talked about what activities are and how we can exploit exported activities.

So it finally happened, I got my OSCP.

Let’s see if it’s possible to use GitHub action for recon

In this post, I look back on all the stuff that I did in 2020

This blog post doesn’t teach you the very basics of the android app, it just talks about the exported activity and their exploitation

This year I got selected for Google Summer of Code 2020 under The Honeynet Project.

I had Snare & Tanner running on two different digital ocean’s droplets.

If you just want to know how to setup bombsquad jump to The setup section and if you are interested in backstory, continue reading.

It’s been a while since I wrote any blog post.

What are Docker containers?

If you do all the HackTheBox, Vulnhub etc VM you will understand the feeling of getting a reverse shell on the machine but we know that you’re far from home.

Like every Infosec enthusiast I want to do OSCP certification program but when I was reading about it I came across this ceritificate named eJPT so I decided to read about it.

Recently I was working on making a new Virtual machine for Vulnhub(it’s in beta right now) and one of the issues I came across was the problem of not having any interface except the loopback (lo) in the newly created VM.

Okay, I gotta start by saying that it been a long time.

I got selected as a Google Summer of Code student in XBMC foundation (a.k.a Kodi) for the project [Static code analysis in Kodi’s addon-check tool](Static code analysis in Kodi’s addon-check tool).

My First Blog post