Understand the attack.
Reproduce the attack.
Investigate the attack.
Yaksha Research Labs is a cybersecurity education and research platform built around practical experimentation. Explore technical research, controlled laboratories, security challenges, and learning paths designed to help you understand how systems fail, how attacks work, and how they can be defended.
Cybersecurity is not something you memorize. It is something you investigate.
Technical investigations
Security research into vulnerabilities, attack paths, tooling, infrastructure and emerging areas of cybersecurity.
Terraform Backdoors in Legitimate Projects
An investigation into how apparently legitimate infrastructure-as-code can become an unexpected persistence and supply-chain risk.
GitHub Actions as an Attack Surface
Examining how CI/CD workflows, repository permissions, secrets, and cloud identity can combine to create unexpected attack paths.
WebSockets from an Attacker's Perspective
A practical examination of WebSocket communication, trust boundaries, authentication, and opportunities for security testing.
Controlled environments
Labs are designed around investigation rather than simply completing a sequence of instructions.
Terraform Supply Chain Lab
Investigate how seemingly legitimate infrastructure code can introduce security risks into an automated deployment environment.
CI/CD Attack Surface Lab
Investigate the relationship between source repositories, automated workflows, credentials, and cloud infrastructure.
IoT Firmware Investigation
Analyze a firmware image, identify its components, investigate exposed services, and trace security weaknesses back to their implementation.
Direction without a traditional course
Structured routes through the research library for learners who want a map without being locked into a marketplace.
Red Team Researcher
From foundational systems knowledge to independent adversary-emulation and security research.
OT Security Researcher
A structured route through industrial systems, architecture, protocols, threats and resilient design.
Cloud Security Researcher
A practical route through cloud identity, networking, automation and attack-path research.
What did not work the first time
Short observations from experiments, labs, tools, infrastructure builds and unexpected results.
Building a Disposable Red Team Environment with Terraform
A field note on turning repeatable infrastructure into disposable research environments without treating automation as a black box.
What a Broken Docker Deployment Taught Me About Infrastructure Assumptions
Small deployment failures often expose assumptions about networking, permissions, volumes and service discovery.
Notes From Analyzing an Embedded Linux Firmware
Observations from extracting firmware, identifying architecture, inventorying files and tracing web functionality.
Questions worth investigating
Not every useful security question has an immediate answer.
Can this attack path be detected using only native cloud telemetry?
Cloud Security
What artifacts remain after this technique is executed?
Detection
Can this security control prevent the attack without disrupting legitimate workflows?
Defensive Engineering