🔍 Vulnerability Research

A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance.

Purpose: Educational reference and portfolio. All PoC code is for detection and research only.

Index

Structure

Each entry follows a consistent format:

beyondtrust-cve-2026-1232/
├── README.md                          # full writeup 
├── references.md                      # references
└── poc/                               # poc scripts
     │    
     ├── check_beyondtrust_integrity.ps1 # PoC 1: version & integrity scanner
     │ 
     ├── tamper_demo.py                  # PoC 2: anti-tamper bypass pattern demo
     │    
     └── policy_diff_demo.py             # PoC 3: policy diff & integrity check demo

Methodology

The writeup covers:

• Root cause — what actually broke and how
• Attack timeline — pre-staging, execution, discovery, remediation
• Technical deep-dive — deobfuscated payloads, attack chain, IOCs
• PoC — reproduction or detection scripts
• Lessons learned — systemic issues and mitigations

Maintained by @horrister