CyberKareemContact Abdullah
Menu

Security writing

Research, engineering, and authorized labs in one collection.

Start with 15 current research and engineering pieces, then browse reviews and field notes. Retired Hack The Box walkthroughs remain a separate authorized lab collection. Search by topic, identifier, machine, or year.

Open Writing Finder Open research ledger
First-party case studiesProject methodsNotes & reviewsRetired authorized labsWriting RSS feed

Complete writing index

All 128 published articles.

This complete date-first index remains available when the interactive finder cannot start. Every article keeps the same permanent URL.

  1. CVE case studyCVE-2026-16532: Link Library's Public Submission Form Reached Raw SQL
  2. Security engineeringBuilding kameHunt: LLM-Assisted Variant Analysis for CVE Research
  3. CVE case studyCVE-2026-63007: Two Uyuni Formula Methods Skipped the Cross-Org Check
  4. CVE case studyCVE-2026-62666: A User Manager Could Mint a Super-Admin API Key
  5. CVE case studyCVE-2026-62670: Missing Flex Permissions Failed Open
  6. CVE case studyCVE-2026-62671: A Cross-Site GET Could Rotate a Grav TOTP Secret
  7. CVE case studyCVE-2026-55675: Fork PR Code Ran in a Privileged GitHub Actions Job
  8. CVE case studyCVE-2026-55890: Grav's style() Method Bypassed the Earlier Fix
  9. CVE case studyCVE-2026-59185: Missing Installation Ownership Check Allowed Cross-Tenant Access
  10. CVE case studyCVE-2026-59889: @JsonUnwrapped Replay Skipped an @JsonView Check
  11. CVE case studyCVE-2026-59979: Missing Tenant Checks in Yosemite-Crew Routes
  12. CVE case studyCVE-2026-61448: Malformed Content-Type Led to Stored XSS in Parse Server
  13. CVE case studyCVE-2026-61706: Pull Request Title Injection in Infracost Actions
  14. CVE case studyCVE-2026-61826: Bazarr's Plex OAuth API Lacked Authentication
  15. Security engineeringBuilding seg-test: A PCI DSS Segmentation Evidence Runner
  16. Hack The BoxHack The Box: CrossFit Walkthrough
  17. Hack The BoxHack The Box: CodePartTwo Walkthrough
  18. Hack The BoxHack The Box: Celestial Walkthrough
  19. Hack The BoxHack The Box: Cache Walkthrough
  20. Hack The BoxHack The Box: CTF Walkthrough
  21. Hack The BoxHack The Box: Book Walkthrough
  22. Hack The BoxHack The Box: Bolt Walkthrough
  23. Hack The BoxHack The Box: Atlas Walkthrough
  24. Hack The BoxHack The Box: Arkham Walkthrough
  25. Hack The BoxHack The Box: Sizzle Walkthrough
  26. Hack The BoxHack The Box: Search Walkthrough
  27. Hack The BoxHack The Box: Seal Walkthrough
  28. Hack The BoxHack The Box: Querier Walkthrough
  29. Hack The BoxHack The Box: PivotAPI Walkthrough
  30. Hack The BoxHack The Box: Multimaster Walkthrough
  31. Hack The BoxHack The Box: APT Walkthrough
  32. Hack The BoxHack The Box: CrossFitTwo Walkthrough
  33. Hack The BoxHack The Box: Eighteen Walkthrough
  34. Hack The BoxHack The Box: Encoding Walkthrough
  35. Hack The BoxHack The Box: Facts Walkthrough
  36. Hack The BoxHack The Box: Falafel Walkthrough
  37. Hack The BoxHack The Box: Fighter Walkthrough
  38. Hack The BoxHack The Box: Forgot Walkthrough
  39. Hack The BoxHack The Box: Ghoul Walkthrough
  40. Hack The BoxHack The Box: Hackback Walkthrough
  41. Hack The BoxHack The Box: Holiday Walkthrough
  42. Hack The BoxHack The Box: Intentions Walkthrough
  43. Hack The BoxHack The Box: JobTwo Walkthrough
  44. Hack The BoxHack The Box: Json Walkthrough
  45. Hack The BoxHack The Box: Kryptos Walkthrough
  46. Hack The BoxHack The Box: Laboratory Walkthrough
  47. Hack The BoxHack The Box: Mirage Walkthrough
  48. Hack The BoxHack The Box: MonitorsFour Walkthrough
  49. Hack The BoxHack The Box: NodeBlog Walkthrough
  50. Hack The BoxHack The Box: Object Walkthrough
  51. Hack The BoxHack The Box: Obscurity Walkthrough
  52. Hack The BoxHack The Box: Oouch Walkthrough
  53. Hack The BoxHack The Box: Ophiuchi Walkthrough
  54. Hack The BoxHack The Box: Overflow Walkthrough
  55. Hack The BoxHack The Box: Overwatch Walkthrough
  56. Hack The BoxHack The Box: Pikaboo Walkthrough
  57. Hack The BoxHack The Box: Quick Walkthrough
  58. Hack The BoxHack The Box: Ransom Walkthrough
  59. Hack The BoxHack The Box: Ready Walkthrough
  60. Hack The BoxHack The Box: RedCross Walkthrough
  61. Hack The BoxHack The Box: Retired Walkthrough
  62. Hack The BoxHack The Box: RouterSpace Walkthrough
  63. Hack The BoxHack The Box: Scanned Walkthrough
  64. Hack The BoxHack The Box: Schooled Walkthrough
  65. Hack The BoxHack The Box: Seventeen Walkthrough
  66. Hack The BoxHack The Box: Sink Walkthrough
  67. Hack The BoxHack The Box: Talkative Walkthrough
  68. Hack The BoxHack The Box: Tenet Walkthrough
  69. Hack The BoxHack The Box: Unobtainium Walkthrough
  70. Hack The BoxHack The Box: Unicode Walkthrough
  71. Hack The BoxHack The Box: TwoMillion Walkthrough
  72. Hack The BoxHack The Box: Trick Walkthrough
  73. Hack The BoxHack The Box: Travel Walkthrough
  74. Hack The BoxHack The Box: TheNotebook Walkthrough
  75. Hack The BoxHack The Box: Vault Walkthrough
  76. Hack The BoxHack The Box: Vessel Walkthrough
  77. Hack The BoxHack The Box: Wall Walkthrough
  78. Hack The BoxHack The Box: Zipper Walkthrough
  79. Security engineeringSecure Automated Purge: Building a Bootable Disk-Sanitization Utility
  80. Security notesWhat Ninety Days of Stoic Practice Changed for Me
  81. Security engineeringBitLocker Cryptographic Erase Utility: Design, Limits, and Validation
  82. Hack The BoxHack The Box: Tabby Walkthrough
  83. Hack The BoxHack The Box: Access Walkthrough
  84. Hack The BoxHack The Box: Forest Walkthrough
  85. Hack The BoxHack The Box: Cap Walkthrough
  86. Hack The BoxHack The Box: Active Walkthrough
  87. Hack The BoxHack The Box: GoodGames Walkthrough
  88. Hack The BoxHack The Box: Remote Walkthrough
  89. Hack The BoxHack The Box: BountyHunter Walkthrough
  90. Security engineeringMicrosoft Teams Classic vs. New Teams: A 2023 Security Comparison
  91. Hack The BoxHack The Box: Luanne Walkthrough
  92. Hack The BoxHack The Box: Passage Walkthrough
  93. Hack The BoxHack The Box: Doctor Walkthrough
  94. Hack The BoxHack The Box: Magic Walkthrough
  95. Hack The BoxHack The Box: OpenAdmin Walkthrough
  96. Hack The BoxHack The Box: Traverxec Walkthrough
  97. Hack The BoxHack The Box: Mango Walkthrough
  98. Hack The BoxHack The Box: Blocky Walkthrough
  99. Hack The BoxHack The Box: Popcorn Walkthrough
  100. Hack The BoxHack The Box: Mirai Walkthrough
  101. Hack The BoxHack The Box: Jarvis Walkthrough
  102. Hack The BoxHack The Box: SwagShop Walkthrough
  103. Hack The BoxHack The Box: Networked Walkthrough
  104. Hack The BoxHack The Box: FriendZone Walkthrough
  105. Hack The BoxHack The Box: Irked Walkthrough
  106. Hack The BoxHack The Box: Sunday Walkthrough
  107. Hack The BoxHack The Box: Conceal Walkthrough
  108. Hack The BoxHack The Box: Poison Walkthrough
  109. Hack The BoxHack The Box: Jerry Walkthrough
  110. Hack The BoxHack The Box: Valentine Walkthrough
  111. Hack The BoxHack The Box: Bounty Walkthrough
  112. Hack The BoxHack The Box: Node Walkthrough
  113. Hack The BoxHack The Box: Silo Walkthrough
  114. Hack The BoxHack The Box: Grandpa Walkthrough
  115. Hack The BoxHack The Box: Sense Walkthrough
  116. Hack The BoxHack The Box: Arctic Walkthrough
  117. Hack The BoxHack The Box: Cronos Walkthrough
  118. Hack The BoxHack The Box: Granny Walkthrough
  119. Hack The BoxHack The Box: Nibbles Walkthrough
  120. Hack The BoxHack The Box: Bastard Walkthrough
  121. Hack The BoxHack The Box: Bashed Walkthrough
  122. Hack The BoxHack The Box: Devel Walkthrough
  123. Hack The BoxHack The Box: Shocker Walkthrough
  124. Certification reviewOffensive Security Wireless Professional (OSWP) Certification Review
  125. Field notesWhat I Learned from Ninety Days of Personal Journaling
  126. Certification reviewECPPTv2 Certification Review
  127. Hack The BoxHack The Box: Lame Walkthrough
  128. Security engineeringInstalling Metasploit Framework on Ubuntu: 2022 Setup Notes

Publishing standard · 02

Publication dates stay visible. Material technical corrections are dated.

  • 01

    Every article keeps its publication date and permanent CyberKareem URL.

  • 02

    Hack The Box walkthroughs publish only after a dated machine-retirement check.

  • 03

    Reusable real-world secrets are removed; authorized-lab demonstration credentials may remain when they are part of the methodology.

  • 04

    Material technical corrections receive dated notes. Titles, summaries, formatting, safety redactions, and section labels may be edited for clarity.

This collection spans 2022 to 2026 and contains 128 published articles and walkthroughs. Drafts, short responses, and lab entries without retirement evidence remain private.

From writing to evidence

Continue into the public vulnerability record.

The Research Ledger connects Abdullah’s Finder credits and CVE assignments directly to their primary public sources.

Open research ledger