Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough - 673

Nie Ohfield & Sagi Tzadik - WizPosted 4 Years Ago

Steal any users access_token via open redirect - 672

Sudi - HackerOnePosted 4 Years Ago

SmartStoreNET - Malicious Message leading to E-Commerce Takeover- 671

Thomas Chauchefoin - Sonar SourcePosted 4 Years Ago

Remote Linux Kernel Heap Overflow- 670

Max Van Amerongen - Sentinel OnePosted 4 Years Ago

Bypassing App Sandbox Restrictions in macOS- 669

Perception PointPosted 4 Years Ago

Microsoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection - 668

Jonathan Bar Or - MicrosoftPosted 4 Years Ago

Hop Hacking Hedy - ShmooCon 2011- 667

Q, Atlas, Cutaway Smash & Slugs on ToastPosted 4 Years Ago

Defeating Spread Spectrum Communication with SDR- 666

Michael Ossmann - ToorCon 2013Posted 4 Years Ago

This bug doesn’t exist on x86: Exploiting an ARM-only race condition- 665

Stong - Perfect BluePosted 4 Years Ago

Type confusion due to race condition during tag type change in Android NFC- 664

Ned Williamson - GooglePosted 4 Years Ago