Mohit Sharma — Security field notes

Mohit Sharma — Security field notes https://rinz0x0cruz.github.io/blog/ Methods, tooling, and evidence from Mohit Sharma's applied security research. en The benchmark said 85. Accuracy said zero. https://rinz0x0cruz.github.io/blog/benchmark-before-you-debate/ https://rinz0x0cruz.github.io/blog/benchmark-before-you-debate/ Mon, 03 Aug 2026 00:00:00 GMT A mock Quorum run produced a handsome judge score and no correct answers. That contradiction became the evaluation design. 8,218 CVEs, 411 seats https://rinz0x0cruz.github.io/blog/fixed-budget-vulnerability-triage/ https://rinz0x0cruz.github.io/blog/fixed-budget-vulnerability-triage/ Mon, 03 Aug 2026 00:00:00 GMT The arithmetic behind ExploitRank's fixed review queue is simple. The hard part is refusing to make the queue mean more than it does. The TLP label that stopped this post https://rinz0x0cruz.github.io/blog/publishing-malware-analysis-evidence/ https://rinz0x0cruz.github.io/blog/publishing-malware-analysis-evidence/ Mon, 03 Aug 2026 00:00:00 GMT I was documenting Malscope's public release boundary when its own fixture data proved the boundary was not enforced yet. Field notes, not victory laps https://rinz0x0cruz.github.io/blog/welcome-to-the-field-notes/ https://rinz0x0cruz.github.io/blog/welcome-to-the-field-notes/ Sun, 02 Aug 2026 00:00:00 GMT The first version of this blog promised transparent methods in 175 tidy words. The useful version has to show the awkward parts too.