Welcome
Hello, my name is Rajesh Pangare, I’m a Security Engineer. I enjoy understanding how systems work under the hood and applying that knowledge to make software more secure.
I have had the opportunity to work across multiple cybersecurity domains, including application security, vulnerability management, Linux/macOS security, detection engineering, and digital forensics & incident response. I primarily write Python and Bash, but particularly enjoy auditing C and C++ code for security vulnerabilities.
I also enjoy exploring operating systems, attack techniques, and building security tools. This website is where I document what I learn. My goal is to share practical knowledge that helps engineers build more secure and reliable systems.
Recent posts
-
Linux persistence hunting usually means running half a dozen different tools chkrootkit, rkhunter, a cron audit script, a manual ss review, maybe a rootkit-specific scanner and then mentally stitching the results …
-
2025-08-21 Bypassing AIDE File Integrity Monitoring
This is a writeup on two vulnerabilities I reported in AIDE (Advanced Intrusion Detection Environment) - CVE-2025-54389 and CVE-2025-54409. AIDE is a classic host-based file integrity monitoring (FIM) tool: it snapshots …
-
Over the weekend, I participated in Cyber Apocalypse CTF 2025 by HackTheBox . One of the “very easy” challenge in PWN section called Quack Quack requires exploiting a stack buffer overflow and bypass stack …
-
2025-03-26 Binary Exploitation: malloc and the heap
Another fun challenge from Cyber Apocalypse CTF 2025 by HackTheBox under pwn section — blessing In this challenge we explore the heap and how malloc works. We get to exploit a unique malloc behaviour to achieve arbitrary …