Exploratory and narrative
Long-form notes on reverse engineering, exploit development, and security architecture.
Target / QNAP QTS 5.x + bundled plugins (Notes Station 3, QmailAgent, QVPN, et al.)
Read across QTS's web layer and three first-party plugins. Looked at how authentication, IPC, plugin sandboxing, and container boundaries actually compose in practice, versus how QNAP's docs describe them.
Target / FortiOS 7.6.6 init monolith (sslvpnd, wad, httpsd, samld, iked, fnbamd) and the dlopen'd library stack
Six months of reverse engineering, fuzzing, and live-VM testing across the SSL VPN portal, web admin, IPsec, DNS, QUIC, SNMP, and SAML surfaces. ~60 AFL++ harnesses placed against the actual parser functions, plus diagrams covering the full attack surface, trust boundaries, and sandbox model.
