a small place on the internet

sy.br1d

what i'm working on.

research, projects, and occasional notes.

writeups & notes

Sep 26, 2026writeup4 min read

Redirect2Admin: Exploiting an SSRF chain to leak internal keys and take over GitHub Enterprise Server

How a requirements check, authentication between services, and two Protobuf messages ended up exposing admin access to GHES.

Sep 13, 2026post3 min read

A IA está esgotando os bugs ou enviesando a busca?

Será que estamos esgotando os bugs ou só repetindo os padrões que os modelos já conhecem?

Aug 27, 2026writeup4 min read

Next.js: From Path Traversal to RCE on Windows Servers

Next.js published CVE-2026-75604 for a flaw in FileSystemCache on self-hosted Windows servers.

projects

a few ongoing experiments

Proteus tools for security research Erebus a harness for longer investigations SecretHound find secrets in files & on the web

have a little website too?
take a button & link back here