Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

The JNDI Strikes Back – Unauthenticated RCE in H2 Database Console- 731

Andrey Polkovnychenko & Shachar Menashe - JFrogPosted 4 Years Ago

Where's the Interpreter!? (CVE-2021-30853)- 730

Patrick WardlePosted 4 Years Ago

RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit- 729

Parsia - EAPosted 4 Years Ago

RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit- 728

Parsia - EAPosted 4 Years Ago

V8 Heap pwn and /dev/memes - WebOS Root LPE- 727

David BuchananPosted 4 Years Ago

Bypassing early 2000s copy protection for software preservation- 726

Paavo Huhtala Posted 4 Years Ago

Faking A Positive COVID Test- 725

Ken Gannon - FSecurePosted 4 Years Ago

How I found (and fixed) a vulnerability in Python- 724

Adam GoldschmidtPosted 4 Years Ago

Shamir’s Secret Sharing Vulnerabilities- 723

Filipe Casal & Jim Miller - Trail of BitsPosted 4 Years Ago

Rocket.Chat Client-side Remote Code Execution- 714

SSDPosted 4 Years Ago