Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Getting root on webOS- 383

Andreas - RSecurityPosted 5 Years Ago

Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform - 382

Sivathmican Sivakumaran - ZDIPosted 5 Years Ago

Cache poisoning in popular open source packages- 381

Adam Goldschmidt - SnykPosted 5 Years Ago

The State of State Machines- 380

Natalie Silvanovich - Project Zero (P0)Posted 5 Years Ago

Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref - 379

Simon Zuckerbraun - ZDIPosted 5 Years Ago

Exploiting email address parsing with AWS SES- 378

Nathan DavisonPosted 5 Years Ago

Bypass SameSite Cookies Default to Lax and get CSRF- 377

RenwaPosted 5 Years Ago

Heap-based Buffer Overflow in Sudo (CVE-2021-3156)- 376

Qualys - Baron SameditPosted 5 Years Ago

Insecure Features in PDFs - 375

On Web-Security and -Insecurity Posted 5 Years Ago

Command PATH security in Go- 374

Russ CoxPosted 5 Years Ago