Hi, I'm
Khaled Nassar aka MindPatch
SECURITY ENGINEER
I hunt bugs, dig into vulnerabilities, play CTFs and write Rust. This is where I write up what I find.
Posts
RSS >An Angular typosquat worm that hides behind web.archive.org
A typosquatted @angular/core clone chains a postinstall hook through the Internet Archive to a CHAOS RAT, then worms across SSH, the AUR and npm. The full chain, the host artifacts to alert on, and two YARA rules.
Docker Escape: Breaking Out of Containers
A practical guide to Docker container escape techniques, covering misconfigurations, privileged containers, capability abuse, and kernel exploits. Understanding these attacks is essential for building secure containerized infrastructure.