Column II · Security research
Vulnerability analysis, attack-surface walkthroughs, and write-ups from authorized testing and disclosed issues.
The public php2shell chain made me reopen PHP. What I actually practiced was not a flashy exploit, but a local lab habit: how to rank findings by evidence, how not to overclaim, and how to write something a maintainer can triage.
Two recent changes to Cat-AgentUI's sandbox and Workspace: a bug where systemd-run silently ate `${...}` in sandboxed commands, and the checks I added when the file panel learned to move whole folders.
