paolocostanzo/paolocostanzo.github.io
Security research site of Paolo Costanzo (NonèCostanzo): reproducible labs, threat-intel reports, field notes and TryHackMe CTF writeups covering cloud/AWS, agentic AI, MCP and prompt injection. Hand-written static HTML, no build step, deployed to GitHub Pages via Actions.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.