Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Bypassing Box’s Time-based One-Time Password MFA- 698

Tal Peleg - VaronisPosted 4 Years Ago

CSS injection via link tag whitelisted-domain bypass- 697

zonduu - GlassDoorPosted 4 Years Ago

Whispers Among the Stars- 696

James Pavur - DEF CON Safe ModePosted 4 Years Ago

KVM: SVM: out-of-bounds read/write in sev_es_string_io- 695

fwilhelm - Project Zero (P0) Posted 4 Years Ago

Apple ColorSync: use of uninitialized memory in CMMNDimLinear::Interpolate- 694

mjurczykPosted 4 Years Ago

Renes'hack- 693

CollShadePosted 4 Years Ago

Jupyter Notework Instance Takeover- 692

Gafnit Amiga - LightspinPosted 4 Years Ago

URL whitelist bypass in https://cxl-services.appspot.com- 691

David SchutzPosted 4 Years Ago

Authentication Bypass when using JWT w/ public keys- 690

Plokta - HackerOnePosted 4 Years Ago

Stored XSS via Mermaid Prototype Pollution vulnerability- 689

Misha98857 - HackerOnePosted 4 Years Ago