Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

AutoWarp: Critical Cross-Account Vulnerability in Microsoft Azure Automation Service- 798

Yanir Tsarimi - Orca Security Posted 4 Years Ago

Escaping Privleged Containers for Fun- 797

Jordy ZomerPosted 4 Years Ago

Oh Snap! More Lemmings (Local Privilege Escalation in snap-confine)- 796

QualysPosted 4 Years Ago

Multiple vulnerabilities in Concrete CMS – part2 (PrivEsc/SSRF/etc)- 795

Adrian Tiron - FortbridgePosted 4 Years Ago

Catching bugs in VMware: Carbon Black Cloud Workload Appliance and vRealize Operations Manager- 794

https://swarm.ptsecurity.com/catching-bugs-in-vmware-carbon-black-cloud-workload-appliance-and-vrealize-operations-manager/Posted 4 Years Ago

CVE-2022-0492 Affecting Cgroups: Can Containers Escape?- 793

Yuval Avrahami - Palo Alto NetworksPosted 4 Years Ago

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql- 792

Stypr - Flatt SecurityPosted 4 Years Ago

Writing a CD-key generator for the Franklin Bookman Desktop Manager- 791

jsyangPosted 4 Years Ago

Analyzing a PJL directory traversal vulnerability – exploiting the Lexmark MC3224i printer (part 2) - 790

Cedric HalbronnPosted 4 Years Ago

Bypassing software update package encryption – extracting the Lexmark MC3224i printer firmware (part 1) - 789

Catalin VisinescuPosted 4 Years Ago