Dhiraj

Security Researcher, Learning & Fuzzing! (

[Dhiraj @RandomDhiraj]

Here is my write-up on Cursor CLI: when a folder name was still shell code.
https://t.co/bdTWM5EnfD
#infosec #AI

[Dhiraj @RandomDhiraj]

Apache fixed my Out-of-Bounds Write in ap_directory_walk) Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM - CVE-2026-59685.
#infosec

[Dhiraj @RandomDhiraj]

w00t! Microsoft Patch Tuesday included my (CVE-2026-83872).
https://t.co/xFQQL2NIGI
#infosec

[Dhiraj @RandomDhiraj]

w00t! Microsoft Patch Tuesday included my (CVE-2026-69619).
https://t.co/a5Rwpo3N0d
#infosec

[Dhiraj @RandomDhiraj]

Here is my write-up on the LPE vulnerability in Check Point Harmony P81 (macOS).
https://t.co/fQtczRKWTS
#infosec

[RedTeamVillage @RedTeamVillage_]

C2 over... Google Calendar and AWS X-Ray? @RandomDhiraj built MeetC2 and XRayC2, two frameworks that hide command and control inside services your defenders will never think to block. Encrypted, trusted, and hiding in plain sight. 🔎

[Dhiraj @RandomDhiraj]

VirtualBox CCID: four bytes in, 255 bytes read (CVE-2026-47043).
https://t.co/WnfFMJJFEI

[Dhiraj @RandomDhiraj]

Model quality matters but context is king. While everyone’s hyped about Mythos finding a 27-year-old bug, I tried a similar workflow with current available models.
https://t.co/u6Ldz19adl
#infosec #AI

[Dhiraj @RandomDhiraj]

VirtualBox xHCI: eight bytes allocated, 8192 bytes copied (CVE-2026-46974).
https://t.co/VtB8kfPovt
#infosec #AI

[Microsoft Security Response Center @msftsecresponse]

@RandomDhiraj Congratulations, @RandomDhiraj!

[Dhiraj @RandomDhiraj]

w00t w00t!🎉

[Dhiraj @RandomDhiraj]

w00t! Microsoft Patch Tuesday included my (CVE-2026-54124).
https://t.co/X4TTB6ZfEm
#infosec

[Dhiraj @RandomDhiraj]

Here is my write-up on (CVE-2026-12374) LPE in Cato Networks client for macOS via XPC auth bypass + TOCTOU.
https://t.co/9QOaFgRAJ5
#infosec #AI

[Dhiraj @RandomDhiraj]

I made a POC on how to abuse git's `filter.<name>.clean` helper for initial access.
https://t.co/kdUwzg1uez
#infosec #redteam

[lablab.ai @lablabai]

AI teams and security teams should be finishing each other's sentences.

Join @RandomDhiraj, Security Manager at @Derivdotcom and @czech_pawel, @lablabai Co-Founder & @Surgexyz_ CEO as they share exactly how to make it happen LIVE.

[Dhiraj @RandomDhiraj]

@D0rkerDevil Give a try with SSD-Disclosure it's better than ZDI (Triaging process)

[Dhiraj @RandomDhiraj]

Part-2, Here is the write-up for my recent work RCE in AWS Kiro IDE (CVE-2026–5429).
https://t.co/6d2aUJStXp
#infosec #AI