Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

RCE via Phar Deserialization in DomPDF- 959

TantoPosted 3 Years Ago

A SQL Injection in ZKSecurityBio to RCE- 958

Silton SantosPosted 3 Years Ago

There’s Another Hole In Your SoC: Unisoc ROM Vulnerabilities- 957

Ilya Zhuravlev - NCC GroupPosted 3 Years Ago

Crop HTTP Server Uninitialized Info Disclosure- 956

gynvaelPosted 3 Years Ago

Crow HTTP framework use-after-free- 955

gynvaelPosted 3 Years Ago

What Is Timestamp Dependence?- 954

HalbornPosted 3 Years Ago

The New Free DAO Hack- 953

Rob Behnke - HalbornPosted 3 Years Ago

Explained: The Wintermute Hack- 952

Rob Behnke - HalbornPosted 3 Years Ago

Aurora Improper Input Sanitization Bugfix Review- 951

ImmunefiPosted 3 Years Ago

Linux CLOCK_THREAD_CPUTIME_ID LPE- 950

noamr - SSDPosted 3 Years Ago