SECURITY RESEARCH / TECHNICAL ANALYSIS
Original attack-path analysis, security test models and incident investigations focused on mobile, backend and AI boundaries.
ORIGINAL RESEARCH / PUBLIC ENGINEERING WORK
01 / API / ACCESS CONTROL
Examine how an authenticated request can cross a tenant boundary if a backend uses an object identifier without checking ownership. Run the local test and compare the fix.
Reproduce an unauthorized object request, enforce the tenant check in the backend and rerun negative-path tests.
02 / MOBILE / DEVICE TRUST
Trace how mobile integrity signals, session state and sensitive-data access cross the iOS/Android and backend boundary.
Differentiate device-integrity evidence from authorization. Review token validation and per-request permission checks.
03 / AI AGENTS / TOOL SECURITY
Explore prompt-injection and unsafe-action paths where a model can request a tool operation but should not decide execution permissions.
Bind actions to authenticated identity, resource scope and approval policy; test replay, retries and prompt manipulation.
04 / PRODUCTION / ROUTING
A first-party incident investigation into canonical host redirects, static asset lookups, 404 behavior and safer route handling.
Trace the original redirect cycle and inspect the corrected routing path and current negative-route behavior.
COORDINATED DISCLOSURE
Use the responsible reporting channel for security issues affecting Demonic Binary. For third-party products, contact the relevant vendor and follow their disclosure process.
Report a VulnerabilityWe describe test conditions and reference the code or record behind each technical note.
Public labs use authorized systems and synthetic fixtures.
Third-party findings are published through an appropriate disclosure process.
