Welcome to Sploitus Agency

What You’ll Find Here

This blog is built around hands-on security research.

I write about:

• Vulnerability Research — Investigating vulnerabilities and understanding their underlying causes.
• CVE Reproduction — Reproducing publicly disclosed vulnerabilities in controlled environments and validating their technical behavior.
• Exploit Analysis — Studying exploitation techniques and building proofs of concept to understand how vulnerabilities can be triggered and abused.
• Root Cause Analysis — Going beyond the advisory to understand exactly why a vulnerability exists.
• Web Security — Research covering web applications, APIs, authentication, authorization, injection vulnerabilities, and other web security issues.
• Technical Writeups — Detailed research posts documenting the process, observations, exploitation conditions, impact, and remediation.

From CVE to Reproduction

A CVE advisory often provides only a high-level description of a vulnerability.

My goal is to go deeper.

When I come across an interesting vulnerability, I try to reproduce it in a controlled environment, investigate the affected component, understand the vulnerable code path, determine the conditions required for exploitation, and document what I discover.

The result is a technical writeup that focuses on the actual mechanics of the vulnerability, rather than simply repeating information from an advisory.

Research Archive

Sploitus is also a personal archive of my security research.

Over time, it will contain research covering different vulnerability classes, software products, technologies, and exploitation techniques — including vulnerabilities that I discover myself as well as interesting publicly disclosed vulnerabilities that are worth reproducing and understanding.

Some posts may be simple reproductions.

Others may go much deeper into the internals of a vulnerability, including root-cause analysis, exploitation, proof-of-concept development, and technical observations.

Why I Write

Security research is built on curiosity, experimentation, and sharing knowledge.

Writing things down forces me to understand a vulnerability properly — not just how to trigger it, but why it works.

Sploitus is where I keep that research public.

Just vulnerability research, technical analysis, and security writeups.

About the Researcher

Jamshed Yergashvoyev is an offensive security researcher from Uzbekistan focused on vulnerability research and web application security.

His work includes vulnerability discovery, CVE research, security testing, exploit development, and technical vulnerability analysis. He is also involved in the CVE ecosystem as a security researcher and CNA contributor.

Sploitus brings these research activities together into one public technical archive.

Research. Reproduce. Understand.

Every vulnerability has a story behind it.

Sploitus exists to investigate that story.

Find the vulnerability. Reproduce it. Understand how it works. Document what you learn.

— Jamshed Yergashvoyev