Blog
Notes on networks, security, and systems. Written primarily so I understand things better.
VNI Hopping: VLAN Hopping Grew Up and Moved to the Data Center
VXLAN and Geneve rebuilt the VLAN as a 24-bit tag inside a UDP packet with no authentication by design. One packet to UDP/4789 on a VTEP drops a frame into any tenant you name.
VLAN Hopping Past the Textbook: Parser Confusion at Layer 2
Switch spoofing and double tagging are the boring ones. The VLAN hops that still work bypass DAI, RA Guard, and DHCP snooping by making the switch and the host disagree about the same frame.
Buying Rekhta Tickets Worth INR 1499 for Free
How I found a critical parameter tampering vulnerability in Jashn-e-Rekhta's payment flow - where the backend blindly trusted the frontend.
I Reverse-Engineered a Live Phishing Operation Targeting My University
A credential harvesting campaign hit LPU from the inside. I traced the kill chain, broke into the attacker's Telegram C2, and found hundreds of compromised accounts.
How I Found a Secret Backdoor to a University's News Feed
A broken access control vulnerability in a university's API let anyone create, edit, or delete official press releases. No auth required. CVSS 9.6.