Research
Author’s pick first — the MLSecOps guide — then papers and Exploit-DB publications.
Author’s pick · Best research
Open framework · Handbook
The work I value most on this site.
My highest-priority research contribution — an open, practical-operational framework for securing machine-learning systems across the full lifecycle. Among everything I have published, this is the work I value most.
Flagship framework
Pentest playbook · Reference
Practical playbook for Email Address Manipulation — equivalence quirks, validation bypass, header/parser gaps, and staged Probe → Observe → Encode → Exploit testing, with the companion EAMG payload generator.
Flagship framework
Practical IPv6-based SSRF techniques, real-world payloads, and testing notes for penetration testers and bug bounty hunters — where IPv4-only filters fail.
Persian paper on Windows account penetration testing.
Read more →Persian introduction to wireless network penetration testing.
Read more →Persian paper on bypassing PowerShell Execution Policy.
Read more →Persian paper on exposing WiFi passwords using C and PowerShell.
Read more →Persian paper on Windows hacking and security with physical access.
Read more →Persian paper on advanced NTFS Alternate Data Streams in Windows 8 and 10.
Read more →Persian paper on Image File Execution techniques.
Read more →Persian paper on changing PowerShell command-line job behavior.
Read more →