Things I Find Interesting,& an Octopus
or Two
My blog about AI security, red teaming, CTFs, vulnerabilities, and everything in between.
LATEST POSTS (4)
AI SECURITY
OCT 10, 2026•7 MIN READ
Beyond Model Weights: How Python Serialization Can Become a Security Risk
A technical exploration of Python serialization vulnerabilities, unsafe deserialization in machine learning model files, and supply-chain security risks.
AI SecurityDeserializationPython
Read Post WEB SECURITY
AUG 16, 2026•9 MIN READ
How Fuzzing a Government Website Led Me to Executives' Contact Details
A technical write-up detailing how endpoint fuzzing and JavaScript analysis on a government website exposed an unauthenticated backend API containing executive contact details.
FuzzingInformation DisclosureSecurity
Read Post CLOUD SECURITY
AUG 15, 2026•8 MIN READ
One .git Directory Away From a Cloud Compromise
A technical deep-dive into how an exposed publicly accessible .git folder turned into full AWS authentication and sensitive cloud user PII exposure.
Cloud SecurityGit LeaksSecurity
Read Post WELCOME
AUG 14, 2026•1 MIN READ
The Octopus Has Entered the Blog.
Hey! I'm Ishaani and welcome to my first blog post :)
WelcomeIntroSecurity
Read Post