Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

cr8escape: New Vulnerability in CRI-O Container Engine - 801

John Walker & Manoj Ahuje - CrowdStrikePosted 4 Years Ago

Dirty Pipe Vulnerability - 800

Max Kellermann Posted 4 Years Ago

webOS Revisited - Even More Mistaken Identities- 799

Andreas - recurityPosted 4 Years Ago

AutoWarp: Critical Cross-Account Vulnerability in Microsoft Azure Automation Service- 798

Yanir Tsarimi - Orca Security Posted 4 Years Ago

Escaping Privleged Containers for Fun- 797

Jordy ZomerPosted 4 Years Ago

Oh Snap! More Lemmings (Local Privilege Escalation in snap-confine)- 796

QualysPosted 4 Years Ago

Multiple vulnerabilities in Concrete CMS – part2 (PrivEsc/SSRF/etc)- 795

Adrian Tiron - FortbridgePosted 4 Years Ago

Catching bugs in VMware: Carbon Black Cloud Workload Appliance and vRealize Operations Manager- 794

https://swarm.ptsecurity.com/catching-bugs-in-vmware-carbon-black-cloud-workload-appliance-and-vrealize-operations-manager/Posted 4 Years Ago

CVE-2022-0492 Affecting Cgroups: Can Containers Escape?- 793

Yuval Avrahami - Palo Alto NetworksPosted 4 Years Ago

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql- 792

Stypr - Flatt SecurityPosted 4 Years Ago