https://petreraducatalin.com/blog/ Insights from Petre Radu Cătălin - technical write-ups on offensive security, penetration testing, cloud threats, and AI security. en Thu, 20 Aug 2026 09:52:58 GMT https://petreraducatalin.com/blog/ai-security-testing-llms/ https://petreraducatalin.com/blog/ai-security-testing-llms/ Thu, 02 Jul 2026 00:00:00 GMT A field guide to how I evaluate AI systems offensively - prompt injection, indirect injection through retrieved content, and the data-exfiltration bugs that leak what LLMs are told through their own outputs. AI Security Penetration Testing LLM Security Petre Radu Cătălin https://petreraducatalin.com/blog/cloud-misconfigurations-pentesters-love/ https://petreraducatalin.com/blog/cloud-misconfigurations-pentesters-love/ Wed, 10 Jun 2026 00:00:00 GMT The top cloud misconfigurations I encounter on real engagements - S3 buckets, over-permissive roles, exposed credentials, and public snapshots - and how to find them before the attackers do. Cloud Security Penetration Testing AWS Azure Petre Radu Cătălin https://petreraducatalin.com/blog/from-web-app-to-domain-admin/ https://petreraducatalin.com/blog/from-web-app-to-domain-admin/ Mon, 18 May 2026 00:00:00 GMT A practical, phase-by-phase breakdown of how a single web application flaw can be chained into full Active Directory compromise - and the detection gaps that let it happen. Penetration Testing Red Team Active Directory CTF Writeups Petre Radu Cătălin