How wp2shell chains a plugin upload bypass with a crafted PHP payload to get interactive shell access on misconfigured WordPress instances.

ISeeU uses Channel State Information from standard WiFi hardware to detect movement through walls — post-exploitation surveillance without cameras.

SSHoney captures attacker credentials, commands, and session behavior in a lightweight C implementation — what I learned from watching real intrusion attempts.

Understanding offensive techniques from the developer's perspective — process injection, API hooking, and evasion methods studied for better detection engineering.