Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

GPT-5.5: Mythos-Like Hacking, Open To All- 2010

XBOWPosted 6 Days Ago

The ultimate Bug Bounty guide to OS command injection vulnerabilities- 2009

YesWeHackPosted 6 Days Ago

Auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation- 2008

YesWeHackPosted 6 Days Ago

Behind the Scenes Hardening Firefox with Claude Mythos Preview- 2007

MozillaPosted 6 Days Ago

Postmortem: TanStack npm supply-chain compromise- 2006

TanStackPosted 6 Days Ago

Next.js WebSocket SSRF: Unauthenticated Access to Internal Resources- 2005

hadrianPosted 6 Days Ago

Post-Mortem: HuffRouter Approval Draining via Trailing Calldata- 2004

Ekubo ProtocolPosted 6 Days Ago

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens- 2003

Seth Jenkins - Google Project ZeroPosted 6 Days Ago

Introducing Crucible: An Invariant Fuzzing Framework for Solana - 2002

Kai Parker - Asymmetric ResearchPosted 7 Days Ago

Pay to Submit on HackenProof- 2001

Hackenproof CTOPosted 7 Days Ago