Hello, my name is Rajesh Pangare, I’m a Security Engineer. I enjoy understanding how systems work under the hood and applying that knowledge to make software more secure.

I have had the opportunity to work across multiple cybersecurity domains, including application security, vulnerability management, Linux/macOS security, detection engineering, and digital forensics & incident response.

I also enjoy auditing open-source projects for security vulnerabilities, exploring operating systems, attack techniques, and building security tools. This website is where I document what I learn. My goal is to share practical knowledge that helps engineers build more secure and reliable systems.

GitHub LinkedIn 󰇮Email

Recent posts

• 2026-10-28 Tricking osquery into exposing arbitrary files to unprivileged users (CVE-2026-46388)

  osquery is usually deployed with more access to a machine than the user running an ordinary process. That is what makes file carving useful: an administrator can ask osquery to collect files and send the resulting …

• 2026-05-20 Hunting Linux Persistence Mechanisms with Bash

  Linux persistence hunting usually means running half a dozen different tools chkrootkit, rkhunter, a cron audit script, a manual ss review, maybe a rootkit-specific scanner and then mentally stitching the results …

• 2025-08-21 Bypassing AIDE File Integrity Monitoring

  This is a writeup on two vulnerabilities I reported in AIDE (Advanced Intrusion Detection Environment) - CVE-2025-54389 and CVE-2025-54409. AIDE is a classic host-based file integrity monitoring (FIM) tool: it snapshots …

• 2025-03-26 Binary Exploitation: Bypassing Stack Canaries

  Over the weekend, I participated in Cyber Apocalypse CTF 2025 by HackTheBox . One of the “very easy” challenge in PWN section called Quack Quack requires exploiting a stack buffer overflow and bypass stack …

All posts →