Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Leaking Meta FXAuth Token leading to 2 click Account Takeover- 1880

ysammPosted 3 Months Ago

CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild- 1879

wizPosted 3 Months Ago

Defeating KASLR by Doing Nothing at All- 1878

Seth JenkinsPosted 3 Months Ago

On the Coming Industrialisation of Exploit Generation with LLMs- 1877

Sean HeelanPosted 3 Months Ago

Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK- 1876

ysammPosted 3 Months Ago

Cloudflare Zero-day: Accessing Any Host Globally- 1875

FearsoffPosted 3 Months Ago

Getting Rounding Right in DeFi- 1874

Josselin FeistPosted 3 Months Ago

Billion-Dollar Bait & Switch: Exploiting a Race Condition in Blockchain Infrastructure- 1873

Mav Levin Posted 3 Months Ago

GnuPG Fail - 12 Vulns- 1872

gnu.failPosted 3 Months Ago

A >$10M protocol drain missed in an audit contest - vulnerability write-up- 1871

samuraii77Posted 3 Months Ago