Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Weird Vulnerabilities Happening on Load Balancers, Shallow Copies and Caches- 1003

Ozgur AlpPosted 3 Years Ago

Stealing passwords from infosec Mastodon - without bypassing CSP- 1002

Gareth HayesPosted 3 Years Ago

The DFX Finance Hack Explained- 1001

Solidity Scan - ShashankPosted 3 Years Ago

SSRF and RCE Through Remote Class Loading in Batik- 1000

Piotr Bazydlo - Zero Day Initiative (ZDI)Posted 3 Years Ago

Contact Point Deanonymization Vulnerability in Meta- 999

Lokesh KumarPosted 3 Years Ago

Facebook SMS Captcha Was Vulnerable to CSRF Attack- 998

Lokesh KumarPosted 3 Years Ago

Code Injection in WebUI page leading to sandbox escape- 997

bugs.chromiumPosted 3 Years Ago

The Team Finance Hack- 996

HalbornPosted 3 Years Ago

RC4 Is Still Considered Harmful - 995

James Forshaw - Project ZeroPosted 3 Years Ago

Bypassing Android Permissions From All Protection Levels- 994

Nikita Kurtin - DEFCON 30Posted 3 Years Ago