Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

TLS NoVerify: Bypass All The Things- 1732

f0rw4rdPosted 11 Months Ago

Subverting Code Integrity in Electron- 1731

Darius Houle - Trail of BitsPosted 11 Months Ago

OAuth Non-Happy Path to ATO- 1730

Omid RezaeiPosted 11 Months Ago

Forcing Quirks Mode with PHP Warnings + CSS Exfiltration without Network Requests- 1729

Takeshi KanekoPosted 11 Months Ago

You Already Have Our Personal Data, Take Our Phone Calls Too (FreePBX CVE-2025-57819) - 1728

Piotr Bazydlo - WatchTowrPosted 11 Months Ago

Slice: SAST + LLM Interprocedural Context Extractor - 1727

Caleb Gross Posted 11 Months Ago

When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074) - 1725

Felix BouletPosted 1 Year Ago

Phishing Emails Are Now Aimed at Users and AI Defenses- 1724

anuragPosted 1 Year Ago

Vtenext 25.02: A three-way path to RCE- 1723

Mattia (0xbro) BrolloPosted 1 Year Ago

How to Phish Users on Android Applications - Case Study on Meta Threads - 1722

remoteawesomethoughtsPosted 1 Year Ago