Himanshu Anand :: Security & Other Notes · Scour

A fake resume invoked China's defence-tech elite, then installed VShell

Himanshu Anand :20 min read

I had some free time, so I tried to pwn V8 (19 minute read)

Himanshu Anand :15 min read

ValleyRAT campaign targets Indian taxpayers with fake GSTR-3B overdue notice

Himanshu Anand :9 min read

Anti India Influence Machine: Troll Farms, Fake News, Algorithms and AI

Himanshu Anand :45+ min read

I found a KVM guest-to-host heap corruption bug and someone else got there first

Himanshu Anand :20 min read

Two Parsers, One JSON and a Flag: Intigriti's July 2026 Challenge

Himanshu Anand :2 min read

I was reporter #11 for a WPForms PayPal webhook vulnerability

Himanshu Anand :15 min read

Fine-tune an LLM on Vertex AI, own the whole GCP project

Himanshu Anand :4 min read

Reading a patch tuesday diff for fun: the dhcp client memcpy that copies more than four bytes (CVE-2026-44815)

Himanshu Anand :10 min read

Defender playbook for the LLM era

Himanshu Anand :10 min read

30 Minutes from patch to exploit

Himanshu Anand :15 min read

Score by Collisions, Patch by Panic

Himanshu Anand :8 min read

The 90 Day disclosure policy is dead

Himanshu Anand :10 min read

I read OpenSSL for fun and found a nonce leak

Himanshu Anand :10 min read

I Found a Europa.eu Compromise

Himanshu Anand :8 min read

Look mom HR application, look mom no job – phishing using Zoom docs

Himanshu Anand :10 min read

A step by step guide how to hack webhooks

Himanshu Anand :4 min read

Magecart Skimmer Analysis: From One Tweet to a Campaign

Himanshu Anand :9 min read

Typosquat Detective : a tiny game to train your eye

Himanshu Anand :

Why Relying on LLMs for Code Can Be a Security Nightmare

Himanshu Anand :2 min read

Log in to enable infinite scrolling